CVE-2026-74235: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GFI Software GFI Exinda AI
Description
GFI Exinda AI and ClearView versions before 7.6.5 contain a path traversal vulnerability in the system maintenance configuration download handler. This flaw allows an authenticated attacker with Admin privileges to read arbitrary files on the system as root by exploiting improper sanitization of pathname parameters. The vulnerability is due to the wcf_handle_download() function appending unsanitized input directly to the base configuration directory path. The issue has a medium severity with a CVSS score of 6.9.
CVSS v4.0
Score 6.9medium
Affected software
GFI Software
GFI Exinda AI
GFI Software
GFI ClearView
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-74235 is a path traversal vulnerability in GFI Exinda AI and ClearView prior to version 7.6.5. The vulnerability exists in the wcf_handle_download() function, which processes parameters prefixed with v_del_ by appending their values directly to the base configuration directory path without sanitizing directory traversal sequences. An attacker with Admin privileges can exploit this to read arbitrary files on the system with root privileges. This vulnerability affects all versions from 0 up to but not including 7.6.5.
Potential Impact
An authenticated attacker with Admin privileges can exploit this vulnerability to read arbitrary files on the system with root-level access. This could lead to exposure of sensitive system files and configuration data, potentially aiding further attacks or system compromise. The vulnerability does not require user interaction and has a network attack vector with low attack complexity.
Mitigation Recommendations
A fix is available in GFI Exinda AI and ClearView version 7.6.5 and later. Users should upgrade to version 7.6.5 or newer to remediate this vulnerability. No other mitigation guidance is provided or necessary once the official fix is applied.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-08-14T18:01:19.917Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a9abf21acd9273b499a2117
Added to database: 09/04/2026, 12:52:49 UTC
Last enriched: 09/15/2026, 00:58:51 UTC
Last updated: 10/18/2026, 06:48:19 UTC
Views: 89
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.