Security Advisory

CVE-2026-0963

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-01-30 06:04:05
Last updated 2026-02-02 16:33:26
Assigner GitLab
State PUBLISHED

Description

An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.