CVE-2026-110116

Risesoft-y9 Digital-Infrastructure versions 9.6.5 through 9.6.11 are vulnerable to a path traversal vulnerability within the fileManager storeFile endpoint. Unauthenticated attackers can exploit this by sending crafted fullPath and fileName parameters to the POST /rest/storeFile request. This all...

CVE-2026-110116 Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile

Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to write arbitrary files. Attackers can send crafted fullPath and fileName parameters to POST /rest/storeFile to create or...

CVE-2025-7108

A vulnerability classified as critical was found in risesoft-y9 Digital-Infrastructure up to 9.6.7. Affected by this vulnerability is the function deleteFile of the file...

PT-2025-28122 · Unknown · Risesoft-Y9 Digital-Infrastructure

Name of the Vulnerable Software and Affected Versions: risesoft-y9 Digital-Infrastructure versions prior to 9.6.8 Description: A critical issue affects the deleteFile function in the file...

CVE-2025-7108: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability classified as critical was found in risesoft-y9 Digital-Infrastructure up to 9.6.7. Affected by this vulnerability is the function deleteFile of the file...