A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617. Impacted is an unknown function of the file /dm/disp…

A critical unrestricted file upload vulnerability has been identified in the Rongzhitong Visual Integrated Command and Dispatch Platform up to version 20260617. The vulnerability exists in the /dm/dispatch/userinfo/upload endpoint, where manipulation of the 'File' argument allows attackers to upload arbitrary files without restrictions. The attack can be initiated remotely, making it particularly dangerous. A public exploit is already available, increasing the risk of widespread exploitation. The vendor was contacted prior to public disclosure but did not respond. No patch or mitigation has been provided by the vendor. This type of vulnerability can lead to remote code execution, full system compromise, or malware deployment on affected systems.