CVE-2026-4233

CVE-2026-4233 pertains to ThingsGateway 12, with a vulnerability in the /api/file/download endpoint. The issue arises from manipulating the fileName parameter, enabling path traversal and remote exploitation. Public exploit appears to be available, and multiple feeds (NVD/Red Hat/ENISA/EUVD/CVE r...