CVE-2026-82460
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory.
- Published Aug 29, 2026
- CVSS 9.3 critical
- 0.9% chance of exploitation in the next 30 days (EPSS)
- A fix is available