CVE-2026-0805: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Crafty Controller
An input neutralization vulnerability in the Backup Configuration component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0805?
CVE-2026-0805 has a high severity rating due to the potential for remote code execution.
How do I fix CVE-2026-0805?
To fix CVE-2026-0805, ensure you are using the latest version of Crafty Controller with the updated security patches applied.
What impact does CVE-2026-0805 have?
CVE-2026-0805 can lead to file tampering and unauthorized remote code execution on affected systems.
Who is affected by CVE-2026-0805?
CVE-2026-0805 affects users of Crafty Controller, specifically those using the Backup Configuration component.
Are there any workarounds for CVE-2026-0805?
While no official workarounds are available for CVE-2026-0805, restricting access to the Backup Configuration component may reduce risk until a fix is applied.