CVE-2026-87747: Ragic｜Enterprise Cloud Database - Arbitrary File Read

Severity: medium (CVSS 4.9 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-09-09 · updated 2026-09-09
Weakness: CWE-23

Description

The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files.

Affected products

Ragic Enterprise Cloud Database: all versions

References

https://www.twcert.org.tw/en/cp-139-11190-7a985-2.html
https://www.twcert.org.tw/tw/cp-132-11189-68e64-1.html

Get alerted when CVE-2026-87747 or the next vulnerability affects your stack