Security Advisory

CVE-2026-29205

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-05-13 22:06:04
Last updated 2026-05-14 13:13:52
Assigner hackerone
CVSS score 8.6
State PUBLISHED

Description

Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.