LOWCVSS v4 2.3Vulnerability
CVE-2026-93571
Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update request to their server can prepare arbitrary XML file that will be saved in location chosen by attacker. This issue was fixed in version 2.0 build 708.
Properties
- Cvss score
- 2.3
- First seen
- 2026-10-29T18:31:07+00:00
- Last seen
- 2026-10-29T18:31:07+00:00
- Euvd assigner
- CERT-PL
- Retrieved at
- 2026-10-29T19:54:43+00:00
- Src batch id
- euvd-20261029T193401Z-a7e82d
- Source url
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-113120
- Score
- 2.3
- Euvd base score version
- 4.0
- Fetched at
- 2026-10-29T19:34:21+00:00
- Euvd vendor
- Krajowa Izba Rozliczeniowa
- Cvss vector
- CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- First seen by Signal
- 2026-10-29T19:34:21+00:00
- Euvd base score
- 2.3
- Vector
- CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Content hash
- bc806fe314f367e4ce134a8b62a8a5b2a11250b85581d961ebb0500cd17d8a54
- Published at
- 2026-10-29T16:20:05.893
- Last modified
- 2026-10-29T16:22:34.397
- Euvd updated
- 2026-10-29T18:31:07+00:00
- Euvd epss pct
- 0
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph