CVE-2026-6865

High

Published: 12/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

CVE-2026-6865 is a vulnerability related to improper limitation of a pathname to a restricted directory, which may lead to unauthorized access to sensitive files. The issue arises when user-supplied input is improperly handled during server-side file path processing.

Risk Assessment

Organizations may be exposed to the risk of sensitive information leakage, which can lead to serious legal and reputational consequences. Improper file path management may allow attackers to access critical data.

Recommendation

It is recommended to implement proper input validation and sanitization mechanisms to prevent Path Traversal attacks. Regularly reviewing and updating server configurations to secure file access is also advised.

Other vulnerabilities in Serwer aplikacji

CVE-2023-37200Medium
A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file on the local filesystem and after manual restart of the server.

Original NVD description (English source)

CWE-22: Improper Limitation of a Pathname to a Restricted Directory (“Path Traversal”) vulnerability that could cause unauthorized access to sensitive files when user-supplied input is improperly handled during server-side file path processing.