CVE-2026-30996

The SAC-NFe electronic invoice management system, developed by SoftSul , is vulnerable in version 2.0.02 . A defect in the file handling logic of the download.php component allows an attacker to perform a directory traversal attack. By sending a crafted GET request , an attacker can bypass direct...