Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.

Threats Tagged 'cve-2026-4285'

View all threats tagged with 'cve-2026-4285'. Filter and sort to focus on specific types of threats.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Tag: cve-2026-4285

Threats Tagged 'cve-2026-4285'

Click on any threat for detailed analysis and mitigation recommendations

CVE-2026-4285: Path Traversal in taoofagi easegen-adminCVE-2026-4285
0

CVE-2026-4285 is a medium severity path traversal vulnerability in the taoofagi easegen-admin product, specifically in the recognizeMarkdown function of Pdf2MdUtil.java. The flaw allows remote attackers to manipulate the fileUrl argument to access unauthorized files on the server. Exploitation does not require user interaction but does require high privileges. The vulnerability affects versions up to commit 8f87936ac774065b92fb20aab55b274a6ea76433. No official patch or updated version is currently available due to the vendor's lack of response. Although no known exploits are in the wild, public exploit code exists, increasing risk. Organizations using easegen-admin should prioritize mitigating this issue to prevent unauthorized file access and potential data leakage.

Join the discussion

Showing 1 to 1 of 1 result

Filters:Tag: cve-2026-4285
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses