Lucene search
+L

1 matches found

CVE
CVE
•added 2026/02/19 3:49 p.m.•39 views

CVE-2026-25766

The CVE-2026-25766 issue affects Echo (github.com/labstack/echo/v5) on Windows, where middleware.Static uses the default filesystem and path.Clean does not treat backslashes as separators. This lets an unauthenticated attacker read files outside the static root by crafting a path that includes se...

5.3CVSS5.6AI score0.00449EPSS
Save