Security Advisory

CVE-2026-13716

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-11 06:05:12

Last updated 2026-08-11 16:58:17

Assigner GitLab

CVSS score 9.1

State PUBLISHED

Description

Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Controller application and perform remote code execution.

← Browse all CVEs View on cve.org ↗