CVE-2026-8209: Path Traversal
Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed .zip extraction results in deletion of the file and a DOS condition. Successful exploitation requires Teacher or higher privileges. Exploitation could result in loss of availability of the web application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8209?
CVE-2026-8209 has been classified as a moderate severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2026-8209?
To mitigate CVE-2026-8209, upgrade Gibbon to version 30.0.01 or later.
What is the impact of CVE-2026-8209?
Exploiting CVE-2026-8209 can lead to denial of service by causing deletion of extracted files.
Who can exploit CVE-2026-8209?
Successful exploitation of CVE-2026-8209 requires Teacher or higher privileges within the application.
What versions are affected by CVE-2026-8209?
CVE-2026-8209 affects all Gibbon versions prior to v30.0.01.