CVE Watch24 de set. de 2026

CVE-2024-48248

NAKIVO Backup and Replication Absolute Path Traversal Vulnerability

CVSS

8.6

Alta

EPSS

94.4%

p100

KEV

SIM

19 de mar. de 2025

Exploit Today

0-100

Publicado: 4 de mar. de 2025 · Última mod.: 24 de set. de 2026 · CWE-36

EPSS · 30d

94.4%EPSS · 30 dias94.4%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

NAKIVO / Backup and Replication

Vulnerabilidade

NAKIVO Backup and Replication Absolute Path Traversal Vulnerability

Adicionado ao KEV

19 de mar. de 2025

Corrigir até

9 de abr. de 2025

Uso conhecido em ransomware

Não

Descrição resumida

NAKIVO Backup and Replication contains an absolute path traversal vulnerability that enables an attacker to read arbitrary files.

Ação necessária

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://helpcenter.nakivo.com/Release-Notes/Content/Release-Notes.htm ; https://nvd.nist.gov/vuln/detail/CVE-2024-48248

Descrição técnica

NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code execution across the enterprise because PhysicalDiscovery has cleartext credentials).

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1166356.1 MÉD

24.3%

——7Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server (aws-serverless-mcp-server) before v0.2.1 might allow an actor who can influence the MCP agent to read the contents of JSON files outside the intended deployment status directory. Where write access has been enabled, to create or overwrite JSON files outside that directory. This issue is reachable through directory traversal sequences or an absolute path supplied in the project name input. To remediate this issue, users should upgrade to version v0.2.1.2d CVE-2026-1186934.7 MÉD

3.5%

——1CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::_create_image_from_xml that trusts unvalidated embedded-file 'filename' attributes in XML documents. Attackers can craft a .ctd, .ctz, or .ctx document with an absolute or ~/ filename and no data, so saving embeds files like ~/.ssh/id_rsa into the document.2d CVE-2026-837848.8 ALT

65.3%

——20Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.7d CVE-2026-837468.1 ALT

66.9%

——20Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.23d CVE-2026-836836.5 MÉD

70.2%

——21Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.7d CVE-2026-702978.8 ALT

67.3%

——20Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.23d