Aetopia CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL Aetopia CVE published 2026-07-14

CVE-2026-38450

A critical vulnerability exists in Aetopia Digital Asset Management (DAM) v.1.0.0, allowing remote attackers to execute arbitrary code via the name and description parameters of the Add/Update Project function. This issue, tracked as CVE-2026-38450, has a CVSS score of 9.8, indicating a high severity level. The vulnerability is caused by a Server-Side Template Injection (SSTI) weakness, which is a type of [truncated]