Efence (Thinking Software Technology) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-14. Vendor: Thinking Software Technology.

CVEs of Efence

• CVE-2026-89180 - CVSS 8.7 (high), 2026-09-14: EFence developed by Thinking Software Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands…
• CVE-2026-80237 - CVSS 8.8 (high), 2026-08-26: EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Authenticated remote attackers can upload and execute web shell…
• CVE-2026-80236 - CVSS 8.8 (high), 2026-08-26: Efence developed by Thinking Software Technology has a SQL Injection vulnerability. Unauthenticated remote attackers can access file upload functionality and…
• CVE-2026-80235 - CVSS 9.8 (critical), 2026-08-26: EFence developed by Thinking Software Technology has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload and execute web shell…