CVE-2026-18274

HighCVSS 7.2

Published: 20/08/2026(UTC)Updated: 21/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.05%

80th percentile - higher than 80% of all known CVEs

Summary

Vulnerability in Heimdall Data Database Proxy in the uploadJar method allows remote code execution via directory traversal. Lack of path validation before using it in file operations. Authentication is required.

Risk Assessment

An authenticated attacker can execute arbitrary code in the context of root, potentially leading to full system compromise.

Recommendation

Update Heimdall Data Database Proxy to the latest version and restrict access to authenticated users.

Other vulnerabilities in Heimdall Data Database Proxy

CVE-2026-12357High
Vulnerability in Heimdall Data Database Proxy in the generateFileContent function allows an authenticated remote attacker to execute arbitrary code via CRLF injection. The attacker can gain root privileges.

Original NVD description (English source)

Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Heimdall Data Database Proxy. Authentication is required to exploit this vulnerability. The specific flaw exists within the uploadJar method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-28603.