CVE-2026-0805

Publication date

2026-01-30 06:04:15

Family

GitLab

State

PUBLISHED

Description

An input neutralization vulnerability in the Backup Configuration component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.