THREAT OPS › Threat News › [NVD] CVE-2026-82460 (CRITICAL 9.8) — Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root
[NVD] CVE-2026-82460 (CRITICAL 9.8) — Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root
CVE-2026-82460 CVSS: 9.8 CRITICAL Published: 2026-08-29T17:17:58.060
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory.
Indicators of compromise
- CVE-2026-82460cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-82460