Lucene search
+L

6 matches found

NVD
NVD
•added 2026/10/16 6:17 p.m.•6 views

CVE-2026-111635

Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension...

5.3CVSS0.00325EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/16 5:39 p.m.•6 views

EUVD-2026-103057

Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension...

5.3CVSS5.9AI score0.00325EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/16 5:39 p.m.•26 views

CVE-2026-111635 Helical Insight through 7.0.0 Path Traversal via /getExternalResource

Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension...

5.3CVSS0.00325EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/10/16 5:39 p.m.•2 views

CVE-2026-111635 Helical Insight through 7.0.0 Path Traversal via /getExternalResource

Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an allowed extension...

5.3CVSS5.9AI score
SaveExploits0References6
CVE
CVE
•added 2026/10/16 5:39 p.m.•13 views

CVE-2026-111635

Helical Insight through 7.0.0 is vulnerable to a path traversal vulnerability (CWE-22) within the /getExternalResource endpoint. This flaw allows authenticated viewers to bypass per-resource access controls by supplying parent-directory segments in the path parameter . Successful exploitation ena...

5.3CVSS5.9AI score0.00325EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/16 12:00 a.m.•6 views

PT-2026-116034

🚨 CVE-2026-111635 Helical Insight through 7.0.0 contains a path traversal vulnerability that allows authenticated viewers to read files outside the solution directory via the path parameter of /getExternalResource. Attackers can supply parent-directory segments to read any readable file with an...

5.3CVSS5.9AI score0.00325EPSS
SaveExploits0References5
Rows per page
Query Builder