CVE-2026-15585: Path Traversal in AKIN Software's Wolvox9 ERP

Q: Which versions should be treated as vulnerable?

AKINSOFT Wolvox9 ERP / KontrolPanel.exe versions from s26.02.17 before 26.02.22 are affected. Version 26.02.22 is the first version identified as not affected by the stated range.

Q: What does an attacker need to exploit this issue?

The vulnerability has network attack vector, low attack complexity, and requires no privileges or user interaction according to the supplied severity vector. It can expose confidential information, while no integrity or availability impact is specified.

Published Aug 18, 2026

Updated

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. AKINSOFT Wolvox9 ERP / KontrolPanel.exe allows Path Traversal.

This issue affects AKINSOFT Wolvox9 ERP / KontrolPanel.exe: from s26.02.17 before 26.02.22.

Affected Software

1 affected component

AKIN Software Wolvox9 ERP / KontrolPanel.exe>=s26.02.17<26.02.22

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade AKINSOFT Wolvox9 ERP / KontrolPanel.exe to a version that resolves this vulnerability.
Fixed in 26.02.22

Event History

Aug 18, 2026

CVE Published

via MITRE·11:23 AM

Data Sourced

via MITRE·11:23 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·12:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which versions should be treated as vulnerable?

AKINSOFT Wolvox9 ERP / KontrolPanel.exe versions from s26.02.17 before 26.02.22 are affected. Version 26.02.22 is the first version identified as not affected by the stated range.

What does an attacker need to exploit this issue?