Vulnerabilities CVE-2026-12339

CVE-2026-12339

Medium

Open

TLP:CLEAR

Authenticated Arbitrary File Write Vulnerability in multiple devices

NVD CVE.org

AI Analysis

No AI analysis yet.

Description

A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences. An authenticated administrator may overwrite arbitrary files on the system.Successful exploitation may allow arbitrary file to overwrite on the underlying system, affecting system integrity and availability.

Details

CVSS Score: 6.9
EPSS Score ⓘ: 0.31%

23.5th percentile
CVSS Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:H/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N
Confidence: 90%
Published: Aug 10, 2026
Last Modified: Aug 11, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.