Security Advisory

CVE-2026-8209

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2026-05-09 03:19:27
Last updated 2026-05-11 17:45:44
Assigner PRJBLK
State PUBLISHED

Description

Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed .zip extraction results in deletion of the file and a DOS condition. Successful exploitation requires Teacher or higher privileges. Exploitation could result in loss of availability of the web application.