VULNERABILITY INTELLIGENCE
CVE-2026-82460
CVSS score9.8 CRITICAL
EPSS probability0.90%
CISA KEVNot currently listed
Published2026-08-29
Last modified2026-09-24
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory.
Weakness classification
- disclosure@vulncheck.com: CWE-22