10 matches found
CVE-2026-36851
CVE-2026-36851 Path traversal / lectura arbitraria de archivos en UnPoller v2.33.0 a través del prefijo file:// en la contraseña. El contenido de los archivos se lee del disco y se transmite a la URL del controlador UniFi configurada durante la autenticación. | ---|--- CVE| CVE-2026-36851 Product...
CVE-2026-36851
Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...
CVE-2026-36851: Improper Limitation of a Pathname to a Restricted Directory
Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...
PT-2026-82244
Name of the Vulnerable Software and Affected Versions UnPoller version 2.33.0 Description A path traversal issue exists in the password field, which allows an attacker to read arbitrary files and perform network exfiltration. Path traversal is a technique used to access files and directories that...
EUVD-2026-66662
Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...
CVE-2026-36851
Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...
CVE-2026-36851
Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...
CVE-2026-36851
UnPoller version 2.33.0 is vulnerable to a path traversal vulnerability in the password field. The application fails to perform path checks when a password starts with the file:// prefix, causing it to read arbitrary files from the local disk via os.ReadFile() in pkg/inputunifi/input.go. An attac...
