CVE-2026-78212: CWE-23 Relative Path Traversal in 4MOSAn Security Technology 4MOSAn Management Center

4MOSAn Management Center contains a Relative Path Traversal vulnerability (CWE-23) that permits unauthenticated remote attackers to perform arbitrary file reads. Exploitation involves manipulating file path inputs to access system files outside the intended directory. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact. No official remediation or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation allows attackers to read arbitrary system files remotely without authentication, leading to a high confidentiality impact. There is no impact on integrity or availability according to the CVSS vector. This could expose sensitive information stored on the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the 4MOSAn Management Center to trusted users and monitor for suspicious activity related to file access attempts.