CVE-2026-109519

🗓️ 13 Oct 2026 13:45:18Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 37 Views🌐 WEB

Remote path traversal in YouTransfer Template Rendering via /settings/template.

Reporter	Title	Published	Views	Family All 8
GithubExploit	Exploit for CVE-2026-109519	16 Sep 202608:12	–	githubexploit
Circl	CVE-2026-109519	13 Oct 202614:32	–	circl
Cvelist	CVE-2026-109519 YouTransfer Template Rendering template path traversal	13 Oct 202613:45	–	cvelist
EUVD	EUVD-2026-98685	13 Oct 202613:45	–	euvd
NVD	CVE-2026-109519	13 Oct 202614:17	–	nvd
Positive Technologies	PT-2026-111527	13 Oct 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-109519: Improper Limitation of a Pathname to a Restricted Directory	13 Oct 202600:00	–	rapid7
Vulnrichment	CVE-2026-109519 YouTransfer Template Rendering template path traversal	13 Oct 202613:45	–	vulnrichment

Vulners

Node

youtransfer youtransferMatch0.0.1

youtransfer youtransferMatch0.0.2

youtransfer youtransferMatch0.0.3

youtransfer youtransferMatch0.0.4

youtransfer youtransferMatch0.0.5

youtransfer youtransferMatch0.0.6

youtransfer youtransferMatch0.0.7

youtransfer youtransferMatch1.0

youtransfer youtransferMatch1.0.0

youtransfer youtransferMatch1.0.1

youtransfer youtransferMatch1.0.2

youtransfer youtransferMatch1.0.3

youtransfer youtransferMatch1.0.4

youtransfer youtransferMatch1.0.5

youtransfer youtransferMatch1.0.6

youtransfer youtransferMatch1.1.0

[
  {
    "vendor": "n/a",
    "product": "YouTransfer",
    "versions": [
      {
        "version": "0.0.1",
        "status": "affected"
      },
      {
        "version": "0.0.2",
        "status": "affected"
      },
      {
        "version": "0.0.3",
        "status": "affected"
      },
      {
        "version": "0.0.4",
        "status": "affected"
      },
      {
        "version": "0.0.5",
        "status": "affected"
      },
      {
        "version": "0.0.6",
        "status": "affected"
      },
      {
        "version": "0.0.7",
        "status": "affected"
      },
      {
        "version": "1.0",
        "status": "affected"
      },
      {
        "version": "1.0.0",
        "status": "affected"
      },
      {
        "version": "1.0.1",
        "status": "affected"
      },
      {
        "version": "1.0.2",
        "status": "affected"
      },
      {
        "version": "1.0.3",
        "status": "affected"
      },
      {
        "version": "1.0.4",
        "status": "affected"
      },
      {
        "version": "1.0.5",
        "status": "affected"
      },
      {
        "version": "1.0.6",
        "status": "affected"
      },
      {
        "version": "1.1.0",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:a:youtransfer:youtransfer:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "Template Rendering"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/vuln/417175
vuldb	www.vuldb.com/cve/CVE-2026-109519
vuldb	www.vuldb.com/submit/983611
github	www.github.com/0xgh0stri13y/CVE-2026-109519/blob/main/POC/exploit.py
vuldb	www.vuldb.com/vuln/417175/cti
github	www.github.com/0xgh0stri13y/CVE-2026-109519/

Parameter	Position	Path	Description	CWE
template	request body	/settings/template	Unauthenticated endpoint allowing path traversal via the 'template' parameter to write arbitrary files (e.g., Nunjucks templates) to the filesystem, leading to SSTI and RCE.	CWE-22
body	request body	/settings/template	Unauthenticated endpoint allowing path traversal via the 'template' parameter to write arbitrary files (e.g., Nunjucks templates) to the filesystem, leading to SSTI and RCE.	CWE-22

14 Oct 2026 15:17Current

7.5High risk

Vulners AI Score7.5

CVSS 46.9

CVSS 27.5

CVSS 3.18.3

CVSS 38.3

EPSS0.00718

SSVC

CWE-22