CVE-2026-104720: Path Traversal in Kobikom Telecommunications' Kobikom
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Kobikom Telecommunications and Informatics Services Inc. Kobikom allows Path Traversal.
This issue affects Kobikom: before KobiPBX-FOP3-SEC-r1.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Kobikomto a version that resolves this vulnerability.Fixed in KobiPBX-FOP3-SEC-r1
Event History
Frequently Asked Questions
Which deployments are affected?
Kobikom deployments running a version before KobiPBX-FOP3-SEC-r1 are affected. The provided information does not identify any configuration prerequisites.
Does exploitation require authentication or user interaction?
No. The CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.
What is the likely impact of successful exploitation?
The CVSS vector indicates high confidentiality impact, with no indicated integrity or availability impact. This is consistent with unauthorized access to files outside the intended restricted directory.