9 matches found
CVE-2026-36851
CVE-2026-36851 UnPoller v2.33.0의 file:// 비밀번호 접두사를 통한 경로 탐색 / 임의 파일 읽기 취약점. 인증 과정에서 파일 내용이 디스크에서 읽혀 구성된 UniFi 컨트롤러 URL로 전송됩니다. | ---|--- CVE| CVE-2026-36851 제품| UnPoller v2.33.0 이전 버전도 영향을 받을 가능성 있음 취약점| CWE-22 경로 탐색, CWE-20 잘못된 입력 검증 CVSS 3.1| 7.5 높음 — AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N 신고자|...
CVE-2026-36851
Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...
EUVD-2026-66662
Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...
CVE-2026-36851
UnPoller version 2.33.0 is vulnerable to a path traversal vulnerability in the password field. The application fails to perform path checks when a password starts with the file:// prefix, causing it to read arbitrary files from the local disk via os.ReadFile() in pkg/inputunifi/input.go. An attac...
CVE-2026-36851
Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...
CVE-2026-36851: Improper Limitation of a Pathname to a Restricted Directory
Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration...
PT-2026-82244
Name of the Vulnerable Software and Affected Versions UnPoller version 2.33.0 Description A path traversal issue exists in the password field, which allows an attacker to read arbitrary files and perform network exfiltration. Path traversal is a technique used to access files and directories that...
