CVE-2026-111635

Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension...

CVE-2026-111635 Helical Insight through 7.0.0 Path Traversal via /getExternalResource

Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension...

EUVD-2026-103057

Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension...

CVE-2026-111635 Helical Insight through 7.0.0 Path Traversal via /getExternalResource

Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension...

CVE-2026-111635

Helical Insight through 7.0.0 is vulnerable to a path traversal vulnerability (CWE-22) within the /getExternalResource endpoint. This flaw allows authenticated viewers to bypass per-resource access controls by supplying parent-directory segments in the path parameter . Successful exploitation ena...

CVE-2026-111635 Helical Insight through 7.0.0 Path Traversal via /getExternalResource

Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension...

CVE-2026-111635

Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension...

CVE-2026-111635: Improper Limitation of a Pathname to a Restricted Directory

Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension...

PT-2026-116034

🚨 CVE-2026-111635 Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an...

Helicalinsight path traversal vulnerability

Helicalinsight 7.0.0 and earlier versions have a path traversal vulnerability. This vulnerability stems from the path parameter in the getExternalResource function, which allows authenticated users to access files outside of the solution directory. Attackers can provide any readable file with...