Threats Tagged 'cve-2026-24897'
View all threats tagged with 'cve-2026-24897'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-24897'
Click on any threat for detailed analysis and mitigation recommendations
0 CVE-2026-24897 is a critical path traversal vulnerability in Erugo, a self-hosted file-sharing platform, affecting versions prior to 0.2.15. An authenticated low-privileged user can exploit insufficient validation of user-supplied paths to upload arbitrary files anywhere on the server, including writable paths within the public web root. This enables remote code execution (RCE), allowing full compromise of the Erugo instance without requiring elevated privileges or user interaction. The vulnerability stems from improper limitation of pathname (CWE-22) and leads to code injection (CWE-94) and unrestricted file upload (CWE-434). Although no known exploits are reported in the wild yet, the CVSS 3.1 score is 10.0, reflecting the critical severity. Organizations using affected Erugo versions should upgrade to 0. Join the discussion | CVE Database V5 | 01/28/2026, 22:24:49 UTC Added: 01/28/2026, 22:35:56 UTC |
Showing 1 to 1 of 1 result