CVE-2026-92533
HighCVSS 7.1Summary
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory.
Risk Assessment
An attacker could read system files accessible to the account used by the application, potentially leading to disclosure of sensitive information.
Recommendation
Update BugTracker.NET to a version that includes a fix for path validation in the file download component.
Other vulnerabilities in BugTracker.NET
See all- CVE-2026-92532High
Unrestricted file upload vulnerability in the BugTracker.NET attachment functionality. An authenticated user with administrator privileges could modify the application configuration to store files in a directory accessible via the web interface. Due to the lack of proper file extension validation, an attacker could upload a malicious ASPX file and subsequently execute it on the server.
- CVE-2026-92531High
Operating system command injection vulnerability in the SVN integration component of BugTracker.NET. The application incorporates the value of the field corresponding to the repository into an svn.exe command without properly validating it. An authenticated user with administrator privileges could store manipulated arguments in the database and subsequently cause them to be processed by the revision comparison functionality.
Original NVD description (English source)
Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successful exploitation could allow the attacker to read system files accessible to the account used by the application.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS