This vulnerability (CVE-2026-49112) in Tammersoft Shared Files (<=1.7.64) is a CWE-35 path traversal issue that allows unauthenticated attackers to read arbitrary files on the server by manipulating file path inputs with sequences like '.../...//'. The CVSS 3.1 score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. No official patch or remediation guidance is currently available from the vendor, and no known exploits are reported in the wild.

An unauthenticated attacker can exploit this vulnerability to read sensitive files on the affected system, potentially exposing confidential information. There is no impact on data integrity or system availability. The vulnerability can be triggered remotely over the network without any user interaction or privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected application and monitor for suspicious file access patterns related to path traversal attempts. Avoid exposing the vulnerable service to untrusted networks if possible.