CVE-2026-79318

web2py 3.2.2-stable (commit a7330a2bf21219fa77860b6665de927dd4f98e6d) is vulnerable to Directory Traversal in read_file()/write_file() (applications/admin/controllers/webservices.py).

• Published Sep 21, 2026
• CVSS 6.5 medium
• 0.6% chance of exploitation in the next 30 days (EPSS)

CVE-2026-79318 at the National Vulnerability Database