CVE-2026-55836

🗓️ 16 Oct 2026 15:23:22Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 26 Views🌐 WEB

Path traversal in Open Zaak Documenten API allows arbitrary server-file read.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2026-55836	16 Oct 202615:27	–	circl
CNNVD	Open Zaak Information Leak Vulnerability	15 Oct 202616:00	–	cnnvd
Cvelist	CVE-2026-55836 Open Zaak: Path traversal / arbitrary server-file read via Documenten API document import (bestandspad)	16 Oct 202615:23	–	cvelist
EUVD	EUVD-2026-102900	16 Oct 202615:23	–	euvd
Mend	CVE-2026-55836	16 Oct 202615:23	–	mend
NVD	CVE-2026-55836	16 Oct 202616:18	–	nvd
Positive Technologies	PT-2026-115629	16 Oct 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-55836: Exposure of Sensitive Information to an Unauthorized Actor	16 Oct 202600:00	–	rapid7
Vulnrichment	CVE-2026-55836 Open Zaak: Path traversal / arbitrary server-file read via Documenten API document import (bestandspad)	16 Oct 202615:23	–	vulnrichment

Vulners

Node

openzaak open_zaakRange1.13.0–1.27.2

openzaak open_zaakRange1.28.0–1.28.2

[
  {
    "vendor": "open-zaak",
    "product": "open-zaak",
    "versions": [
      {
        "version": ">= 1.13.0, < 1.27.2",
        "status": "affected"
      },
      {
        "version": ">= 1.28.0, < 1.28.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/open-zaak/open-zaak/commit/69c78ce2a0edb45bec8809bc2205585c5f8a4054
github	www.github.com/open-zaak/open-zaak/releases/tag/1.29.0
github	www.github.com/open-zaak/open-zaak/commit/8acd5e59e0132aa19284bf22f7b3defca279e2ce
github	www.github.com/open-zaak/open-zaak/releases/tag/1.27.2
github	www.github.com/open-zaak/open-zaak/releases/tag/1.28.2
github	www.github.com/open-zaak/open-zaak/security/advisories/GHSA-x5cj-23hr-5r54
github	www.github.com/open-zaak/open-zaak/commit/4b23957b55ab792bc2ba1fbc5ce6918881b62ab8

Parameter	Position	Path	Description	CWE
bestandspad	request body	/import_document_row	The _import_document_row task uses the attacker-controlled 'bestandspad' CSV field without path validation, allowing for path traversal to read arbitrary files on the server.	CWE-200

16 Oct 2026 20:04Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.16.8

EPSS0.00391

SSVC

CWE-200