CVE-2026-36848

Gigamon GVOS v5.16.1 and below is vulnerable to a critical Directory Traversal (CWE-22) flaw in the legacy H-VUE subsystem within the persistd daemon. The vulnerability exists because the TornadoHTTP web service on port 8089 fails to sanitize user-supplied paths in the /opt/tms/persistd_py/persis...