CVE-2026-22905

Publication date

2026-02-09 07:40:17

Family

CERTVDE

State

PUBLISHED

Description

An unauthenticated remote attacker can bypass authentication by exploiting insufficient URI validation and using path traversal sequences (e.g., /js/../cgi-bin/post.cgi), gaining unauthorized access to protected CGI endpoints and configuration downloads.