CVE-2026-24464 — Appliance mode iControl REST vulnerability
When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator r…
Published: 2026-05-13 · CVSS: 6.9 · CVSS 4.0
When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator role privileges to cross a security boundary and delete files. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7