CVE-2026-95140

The software kkFileView versions v5.0.0 through v5.0.2 is vulnerable to a directory traversal vulnerability located in FileController.java . The fileUpload, createFolder, and existsFile endpoints accept a path parameter that is concatenated into the upload base path without sufficient validation....

EUVD-2026-93551

kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, createFolder and existsFile endpoints accept a "path" parameter that is concatenated into the upload base path without validation, allowing unauthenticated attackers to create...

CVE-2026-95140

kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, createFolder and existsFile endpoints accept a "path" parameter that is concatenated into the upload base path without validation, allowing unauthenticated attackers to create...