CVE-2026-2328

Published: Mar 30, 2026Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: info@cert.vde.com (Secondary)

Description

An unauthenticated remote attacker can exploit insufficient input validation to access backend components beyond their intended scope via path traversal, resulting in exposure of sensitive information.

Related CWEs

CWE-790

Improper Filtering of Special Elements

The product receives data from an upstream component, but does not filter or incorrectly filters special elements before sending it to a downstream component.

References (1)

https://certvde.com/de/advisories/VDE-2026-010

Source: info@cert.vde.com

Timeline

No history available yet.