CVE Catalog

CVE-2026-36848

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.71%

49th percentile — higher than 49% of all known CVEs

Summary

A Directory Traversal vulnerability in Gigamon GVOS version 5.16.1 and below, located in the H-VUE subsystem, allows unauthorized access to files outside the application's root directory.

Risk Assessment

An attacker can read sensitive configuration files or system data, leading to information disclosure and potential privilege escalation within the network.

Recommendation

It is recommended to immediately upgrade Gigamon GVOS to a version newer than 5.16.1, where this vulnerability has been fixed.

Original NVD description (English source)

Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS