CVE-2026-104706
HighCVSS 8.4Summary
A path traversal vulnerability was discovered in DigitalCanion's product that allows viewing or downloading sensitive system files over the portal https://<ip>:8443 via the Administration -> View Logs menu.
Risk Assessment
An attacker can access confidential system files, potentially leading to information disclosure and facilitating further attacks. Portal access is required, but the impact can be severe.
Recommendation
Update the software to a version that fixes the path traversal. Restrict access to the administrative portal and verify that no unauthorized file downloads occurred.
Other vulnerabilities in DigitalCanion
See all- CVE-2026-104809High
A vulnerability was discovered in DigitalCanion's product where a privileged process loads an attacker-controlled .so file with a predictable module name without verifying its origin or integrity. The malicious module is then executed with the privileges of that process.
- CVE-2026-104806Medium
Path traversal vulnerability in DigitalCanion's management portal, in the Maintenance → System Logs functionality. Allows access to files outside the intended directory, including sensitive system files.
- CVE-2026-104805High
A vulnerability in the backup restoration functionality allows an attacker with access to the configured backup repository to introduce arbitrary files during restoration. The mechanism fails to properly validate paths, file types, integrity, and authenticity of files within a restored TGZ archive.
Original NVD description (English source)
DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://<ip>:8443 via menus Administration -> View Logs
Vulnerability data from NVD (NIST) · CISA KEV · EPSS