CVE-2026-50869: Path Traversal
An issue in the api/plugin.php component of Bludit v3.19.0 allows attackers to execute a directory traversal via supplying a crafted request.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Bludit v3.19.0from your environment.Uninstall or take offline any installations of Bludit v3.19.0 until an official fix is available.
- Compensating control
Restrict access to the api/plugin.php endpoint (for example via firewall rules, WAF, or IP allowlisting) to trusted administrators and block public access until a vendor patch is released.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-50869?
CVE-2026-50869 has a critical severity rating of 9.8 according to CVSS 3.1.
How do I fix CVE-2026-50869?
To fix CVE-2026-50869, update Bludit to the latest version where this vulnerability is patched.
What type of vulnerability is CVE-2026-50869?
CVE-2026-50869 is a directory traversal vulnerability found in the api/plugin.php component of Bludit.
What can an attacker do with CVE-2026-50869?
An attacker can exploit CVE-2026-50869 to execute directory traversal attacks via a crafted request.
Which version of Bludit is affected by CVE-2026-50869?
CVE-2026-50869 affects Bludit version 3.19.0.