THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-33922 (MEDIUM 6.0) — A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface due to insufficient validation of an input parameter. A local user with administrative credentials for the web interface could submit an archive name containing traversa

[NVD] CVE-2026-33922 (MEDIUM 6.0) — A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface due to insufficient validation of an input parameter. A local user with administrative credentials for the web interface could submit an archive name containing traversa

mednvdPublished 2026-08-11

CVE-2026-33922 CVSS: 6.0 MEDIUM Published: 2026-08-11T10:17:12.257

A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface due to insufficient validation of an input parameter. A local user with administrative credentials for the web interface could submit an archive name containing traversal sequences and delete arbitrary files reachable by

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2026-33922cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-33922