CVE-2026-108140: Path Traversal
Published Oct 27, 2026
·Updated
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal.
Event History
Oct 27, 2026
CVE Published
via MITRE·04:16 PM
Data Sourced
via MITRE·04:16 PM
DescriptionWeakness
Frequently Asked Questions
1
Who is realistically exposed to exploitation?
Backup servers are exposed when an authenticated user has the Restore Operator role and can control content in a backed-up NAS share.
2
What access does an attacker need?
The attacker must be authenticated, hold the Restore Operator role, and control the contents of a NAS share that has been backed up.