CVE-2025-70820

8th percentile - higher than 8% of all known CVEs

Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder. The vulnerability enables unauthorized access to resources outside the intended scope.

An attacker may gain access to files and folders of other users or system resources, potentially leading to leakage of confidential data. In multi-tenant environments this breaks data isolation between users.

Update Zettlab D6 Ultra software to version 1.7.0 or later. It is also advisable to verify folder access permissions and audit access logs.