U.S. Geological Survey vulnerabilities
We track 1 vulnerability in U.S. Geological Survey products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 10, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest U.S. Geological Survey vulnerabilities
- 8.8 High severity
Area Species Management Research Program: Unrestricted Upload of File with Dangerous Type
U.S. Geological Survey Area Species Management Research Program (ARMI) accepts any uploaded file and stores the file under '/uploads/{upload-file}'. A remote, authenticated attacker could upload a crafted PHP file that executes and returns command output from