CVE-2026-0805
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller
Summary
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller
Original description
The description as published by the source.
An input neutralization vulnerability in the Backup Configuration component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.
References
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.com