HIGHCVSS v3.1 7.3Vulnerability
CVE-2026-123747
A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description (PPD) files. A remote, unauthenticated attacker can exploit this directory traversal flaw by submitting filenames containing path traversal sequences. This allows the attacker to upload or delete arbitrary files on the system, which can result in data corruption, denial of service, or arbitrary command execution.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-11T23:49:45.533241+00:00
- Cvss severity
- HIGH
- Cvss score
- 7.3
- Retrieved at
- 2026-11-11T23:50:18+00:00
- Score
- 7.3
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-123747
- Cvss vector
- CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H
- First seen by Signal
- 2026-11-11T19:44:24+00:00
- Name
- CVE-2026-123747
- Vector
- CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:N/I:H/A:H
- Published at
- 2026-11-11T19:17:30.467
- Last modified
- 2026-11-11T19:17:30.677
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph