CVE-2026-56845: Path Traversal
Published Aug 4, 2026
·Updated
An unauthenticated path traversal (LFI) vulnerability exists under /custom-sounds/ when CustomSounds storage is configured to FileSystem. By including ../ sequences in the request path, an attacker can read arbitrary files outside the base directory.
Affected Software
1 affected component
CustomSounds
Event History
Aug 4, 2026
CVE Published
via MITRE·12:43 AM
Data Sourced
via MITRE·12:43 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-56845?
The severity of CVE-2026-56845 is rated as high with a score of 7.5.
2
How do I fix CVE-2026-56845?
To fix CVE-2026-56845, ensure that the CustomSounds storage is not configured to FileSystem or implement proper input validation to prevent path traversal.
3
What type of vulnerability is CVE-2026-56845?
CVE-2026-56845 is classified as an unauthenticated path traversal vulnerability.
4
What can attackers achieve by exploiting CVE-2026-56845?
By exploiting CVE-2026-56845, attackers can read arbitrary files outside the base directory.
5
Where is the vulnerability CVE-2026-56845 found?
CVE-2026-56845 is found under the /custom-sounds/ path in the CustomSounds software.