CVE-2026-113437: Path Traversal
Published Nov 9, 2026
·Updated
Path Traversal vulnerability exists in SS1/ SS1 Cloud provided by DOS Co., Ltd. and the ODM product rocoeyes provided by Rococo Co. Ltd. Arbitrary files may be deleted.
Affected Software
3 affected components
DOS Co., Ltd. SS1
DOS Co., Ltd. SS1 Cloud
Rococo Co. Ltd. rocoeyes
Event History
Nov 9, 2026
CVE Published
via MITRE·07:57 AM
Data Sourced
via MITRE·07:57 AM
DescriptionSeverity
Data Sourced
via NVD·08:17 AM
DescriptionSeverityWeakness
Event
via NVD·08:17 AM
Frequently Asked Questions
1
What access does an attacker need to exploit this issue?
The published vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required. The provided information does not identify any additional preconditions or affected interfaces.
2
What is the potential impact of successful exploitation?
An attacker may delete arbitrary files. The supplied severity vector indicates an integrity impact, with no stated confidentiality or availability impact.