What’s Vulnerable › Vulnerabilities

CVE-2026-6815: CVE-2026-6815

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-05-11 · updated 2026-06-17
• Weakness: CWE-22

Description

An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perform a Path Traversal attack to create or overwrite arbitrary files anywhere on the host filesystem, bypassing the application's intended storage sandbox.

Affected products

• Casdoor: through 2.328.0

References

• https://kb.cert.org/vuls/id/937808
• https://www.kb.cert.org/vuls/id/937808

Get alerted when CVE-2026-6815 or the next vulnerability affects your stack