CVE-2026-88136
HighCVSS 8.8Summary
Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.
Risk Assessment
An authorized attacker could gain control of the system, potentially compromising data confidentiality and integrity.
Recommendation
Apply available security updates for WebDAV and restrict access to the service to trusted users only.
Other vulnerabilities in WebDAV
See all- CVE-2026-96847High
An untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally. The flaw exists in the code that processes WebDAV requests.
- CVE-2026-96843High
A heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally. The flaw exists in code that processes data in heap memory.
- CVE-2026-88135High
Improper access control in WebDAV allows an authorized attacker to elevate privileges locally.
- CVE-2026-88126High
Untrusted pointer dereference in WebDAV allows an authorized attacker to elevate privileges locally.
- CVE-2026-85828High
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
- CVE-2026-85827High
Heap-based buffer overflow in WebDAV allows an authorized attacker to elevate privileges locally.
- CVE-2026-85370High
Use after free in WebDAV allows an authorized attacker to elevate privileges locally.
- CVE-2026-70262High
Heap-based buffer overflow in WebDAV allows an unauthorized attacker to elevate privileges over a network.
Original NVD description (English source)
Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS