CVE-2026-13716

creationtimestamp| type| source ---|---|--- 2026-08-11 07:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117075701139213523 2026-08-11 07:30:30+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mss3szlkbn2n 2026-08-19 02:07:07+00:00| seen|...

CVE-2026-13716 Path Traversal: '.../...//' in Crafty Controller

Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Controller application and perform remote code execution...

CVE-2026-13716

Crafty Controller is affected by CVE-2026-13716, which exposes a path traversal vulnerability in server import and admin file upload. The issue allows a remote, authenticated attacker to upload files to arbitrary paths that the Crafty Controller application can access, enabling remote code execut...