CVE Catalog
CVE-2026-28157
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk0.38%
31th percentile - higher than 31% of all known CVEs
Summary
Path Traversal vulnerability in Do Lasso versions up to 358, exploitable by Subscriber role. Allows access to files outside the root directory.
Risk Assessment
Potential to read sensitive server files, such as configurations, passwords, or user data.
Recommendation
Update the Do Lasso plugin to the latest version and restrict access for low-privilege accounts.
Original NVD description (English source)
Subscriber Path Traversal in Do Lasso <= 358 versions.