CVE-2026-19829

Affected product: 648540858 wvp-GB28181-pro 2.7.4-20260107. The vulnerability resides in the Log File Download Endpoint, specifically LogController.java, where manipulation of the fileName argument enables path traversal. Remote exploitation is possible, and public exploits have been released. CV...