CVE-2026-82460 — Cloud Commander before 19.20.2 Directory Traversal via REST and Markdown
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Att…
Published: 2026-08-29 · CVSS: 9.3 · CVSS 4.0
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7