CVE-2026-7395
High8.5Asset Suite allows unauthenticated users to access HTTPPublishAdapterTestServlet that can be used for configuration file upload, leading to information disclosure and integrity compromise. The HTTPPublishAdapterTestServlet is specifically meant for testing purposes to be used in a non-production environment.
- CVSS
- 8.5v4.0
- EPSS (exploit probability)
- 0.2%15th pct
- CISA KEV
- Not listed
EPSS trendFIRST daily scores, last 90 days
Daily values
| Score date | EPSS | Percentile |
|---|---|---|
| 2026-10-20 | 0.2% | 15.0% |
| 2026-10-19 | 0.2% | 15.0% |
| 2026-10-18 | 0.2% | 14.9% |
| 2026-10-16 | 0.2% | 14.9% |
| 2026-10-15 | 0.2% | 14.9% |
| 2026-10-14 | 0.2% | 14.9% |
| 2026-10-13 | 0.2% | 14.8% |
| 2026-10-12 | 0.2% | 14.8% |
| 2026-10-11 | 0.2% | 14.8% |
| 2026-10-10 | 0.2% | 14.7% |
| 2026-10-09 | 0.2% | 14.7% |
| 2026-10-08 | 0.2% | 14.7% |
| 2026-10-07 | 0.2% | 14.7% |
| 2026-10-06 | 0.2% | 14.6% |
| 2026-10-05 | 0.2% | 14.5% |
| 2026-10-04 | 0.2% | 14.5% |
| 2026-10-03 | 0.2% | 14.5% |
| 2026-10-02 | 0.2% | 14.5% |
| 2026-10-01 | 0.2% | 14.5% |
| 2026-09-30 | 0.2% | 14.4% |
| 2026-09-29 | 0.4% | 33.7% |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X