CVE-2026-82768
HighCVSS 8.1Summary
A path traversal vulnerability exists in SGA1000. An attacker with FTP access to the product may view and/or alter arbitrary files on the server.
Risk Assessment
This vulnerability allows an attacker with FTP access to read and modify arbitrary files on the server, potentially leading to data leakage or system integrity compromise.
Recommendation
Update SGA1000 to a patched version and restrict FTP access to trusted networks and accounts only.
Other vulnerabilities in SGA1000
See all- CVE-2026-82767Medium
A cross-site scripting vulnerability exists in SGA1000. If exploited, an arbitrary script may be executed in a logged-in user's web browser.
- CVE-2026-82766High
An OS Command Injection issue exists in SGA1000 due to improper neutralization of special elements. An attacker who can log in to the product may execute arbitrary OS commands.
Original NVD description (English source)
Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP.