CVE-2026-110116: Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile
Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to write arbitrary files. Attackers can send crafted fullPath and fileName parameters to POST /rest/storeFile to create or overwrite service-writable files, potentially achieving code execution.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed?
Risesoft-y9 Digital-Infrastructure versions 9.6.5 through 9.6.11 are identified as affected. The vulnerable fileManager storeFile endpoint is reachable at POST /rest/storeFile.
Does exploitation require authentication or user interaction?
No. An unauthenticated attacker can exploit the endpoint remotely without user interaction by supplying crafted fullPath and fileName parameters.
What can an attacker do through this issue?
An attacker can create or overwrite files in locations writable by the service. This may lead to code execution depending on which writable files can be replaced or created.
What should be prioritized if remediation cannot be applied immediately?
Restrict unauthenticated network access to the affected /rest/storeFile endpoint, particularly from untrusted networks. Review service-writable locations for unexpected created or modified files.
How can defenders investigate possible exploitation?
Review POST requests to /rest/storeFile for suspicious fullPath or fileName values and inspect service-writable directories for unexpected file creation or overwrites. Focus on files that could affect application behavior or execution.