CVE-2026-36227

MediumCVSS 6.5

Published: 22/05/2026(UTC)Updated: 23/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.87%

55th percentile - higher than 55% of all known CVEs

Summary

In Easy Chat Server 3.1, a Directory Traversal vulnerability via the UserName parameter allows a remote attacker to obtain sensitive information and execute arbitrary code.

Risk Assessment

A remote attacker can read confidential files on the server and execute arbitrary code, potentially leading to full system compromise.

Recommendation

Update Easy Chat Server to a version newer than 3.1 that contains the fix.

Other vulnerabilities in Easy Chat Server

CVE-2026-36228High
A buffer overflow vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the chat message functionality.

Original NVD description (English source)

Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameter