CVE Catalog
CVE-2026-30278
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.53%
42th percentile - higher than 42% of all known CVEs
Summary
In FLY is FUN Aviation Navigation v35.33, an arbitrary file overwrite vulnerability exists during file import. An attacker can overwrite critical internal files, leading to arbitrary code execution or information exposure.
Risk Assessment
An attacker can remotely overwrite critical system files, potentially leading to application takeover or data leakage.
Recommendation
Update the application to a version after 35.33 or apply the available patch.
Original NVD description (English source)
An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.