Security Advisory

CVE-2026-40547

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-06-01 09:04:05

Last updated 2026-06-01 13:04:15

Assigner CERT-PL

CVSS score not scored

State PUBLISHED

Description

SOPlanning is vulnerable to Path Traversal in backup endpoints. Authenticated remote attacker is able to exploit a vulnerable endpoint and construct payloads that allow reading and executing files previously added through the backup functionality. Critically, due to CVE-2026-40543 (Missing Authorization), any backup file can be read by any (unauthorized) user. This issue affects SOPlanning version 1.55 and below.

← Browse all CVEs View on cve.org ↗