CVE Catalog

CVE-2026-57871

HighCVSS 7.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.36%

28th percentile - higher than 28% of all known CVEs

Summary

Relative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files. This issue affects MicroRealEstate through version 1.0.0-alpha3.

Risk Assessment

An attacker could overwrite critical system files, potentially leading to system integrity compromise, arbitrary code execution, or full application takeover.

Recommendation

Immediately update MicroRealEstate to the latest available version that fixes this vulnerability and implement server-side file path validation.

Original NVD description (English source)

Relative path traversal vulnerability in MicroRealEstate file upload functionality allows attackers to potentially overwrite system files. This issue affects MicroRealEstate: through 1.0.0-alpha3.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS