What is the severity of CVE-2018-9206?

CVE-2018-9206 has a CVSS v3 score of 9.8, which is classified as Critical severity.

Is there an exploit available for CVE-2018-9206?

Yes, there are known exploits available for CVE-2018-9206. Immediate patching is recommended.

Is there a patch available for CVE-2018-9206?

Yes, patches are available for CVE-2018-9206. Check the vendor advisories for update instructions.

CVE Database Threat Actors Research API Docs

Visit Strobes.co Sign Up for Strobes

CVE Database Threat Actors Research API Docs

Tools

KB Lookup

Visit Strobes.co Sign Up for Strobes

HomeCVEs

Do you like the insights?

Strobes vulnerability intelligence is a key component of their Exposure Management platform that helps organizations understand, prioritize, and address security vulnerabilities more effectively.

CVE-2018-9206 - CVE Details, Severity, and Analysis | Strobes VI

Home CVEsCVE-2018-9206

CVE-2018-9206

Published: January 27, 2026

Last updated:1 day ago (January 27, 2026)

Exploit: YesZero-day: YesPatch: YesTrend: Neutral

TL;DR

Updated January 27, 2026

CVE-2018-9206 is a critical severity vulnerability with a CVSS score of 9.8. Exploits are available; patches have been released and should be applied urgently. This is classified as a zero-day vulnerability.

Key Points

1Critical severity (CVSS 9.8/10)
2EPSS: 94.00% - very high likelihood of exploitation
3

Severity Scores

CVSS v39.8

CVSS v27.5

Priority Score999.0

EPSS Score94.0

Critical

Cite This Page

APA Format

Strobes VI. (2026). CVE-2018-9206 - CVE Details and Analysis. Strobes VI. Retrieved January 28, 2026, from https://vi.strobes.co/cve/CVE-2018-9206

Quick copy link + title

Please cite this page when referencing data from Strobes VI. Proper attribution helps support our vulnerability intelligence research.

Public exploits are available

4Vendor patches are available

5Strobes Priority Score: 999/1000 (Critical)

6Affects products from: Jquery File Upload Project

Exploitation LikelihoodCritical

94.00%EPSS

Very high probability of exploitation in the next 30 days

Immediate patching required

94.00%

EPSS

9.8

CVSS

Yes

Exploit

Yes

Patch

Critical Priority

high EPSS • exploit exists • critical severity • high priority

EPSS predicts the probability of exploitation in the next 30 days based on real-world threat data, complementing CVSS severity scores with actual risk assessment.

Description

Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0

CVSS v3 Breakdown

Attack Vector:Network

Attack Complexity:Local

Privileges Required:Network

User Interaction:Network

Scope:Unchanged

Confidentiality:High

Integrity:High

Availability:High

Exploit References

Exploit-DB Exploit-DB Exploit-DB Exploit-db.com Exploit-db.com Metasploit GitHub GitHub GitHub GitHub

Patch References

[email protected]Zeroday CZ

Trend Analysis

Neutral

Vulnerable Products

Vendor	Product
Jquery File Upload Project	Jquery File Upload

Advisories

GitHub Advisory

NVD: Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0