CVE Catalog
CVE-2026-29205
HighCVSS 8.6Exploitation Probability (EPSS)
Very high risk7.24%
94th percentile - higher than 94% of all known CVEs
Summary
Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.
Risk Assessment
The organization may be exposed to unauthorized access to sensitive data, potentially leading to information leakage.
Recommendation
It is recommended to review and improve privileges management and implement effective path filtering mechanisms.
Original NVD description (English source)
Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.