A vulnerability was found in BorG SPM 2007 . It has been classified as critical . Impacted is an unknown function. Performing a manipulation results in unrestricted upload. This vulnerability was named CVE-2026-6885 . The attack may be initiated remotely. There is no available exploit.