EUVD-2026-60617
GHSA-825w-c5j5-75vm
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Network-accessible service requires no credentials (PR:N, AC:L); path traversal yields read-only file access, so I:N and A:N; C:H for unrestricted file disclosure.
Primary rating from Vendor (TR-CERT).
CVSS VectorVendor: TR-CERT
Lifecycle Timeline
3DescriptionCVE.org
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AKIN Software Computer Import Export Industry and Trade Ltd. AKINSOFT Wolvox9 ERP / KontrolPanel.exe allows Path Traversal.
This issue affects AKINSOFT Wolvox9 ERP / KontrolPanel.exe: from s26.02.17 before 26.02.22.
AnalysisAI
Path traversal in AKINSOFT Wolvox9 ERP's KontrolPanel.exe component exposes arbitrary server-side files to unauthenticated remote attackers via unsanitized file path inputs. Affected deployments span versions s26.02.17 through s26.02.21, with a confirmed fix in version 26.02.22 per TR-CERT advisory TR-26-0851. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No special configuration or authentication is required - the CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms unauthenticated remote exploitation against default deployments of AKINSOFT Wolvox9 ERP KontrolPanel.exe when the service is network-accessible. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, 7.5 High) signals a network-exploitable, zero-prerequisite vulnerability with high confidentiality impact - the most favorable attack profile an opportunistic threat actor could encounter. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade AKINSOFT Wolvox9 ERP / KontrolPanel.exe to version 26.02.22 or later, the vendor-confirmed fix version per TR-CERT advisory TR-26-0851 at https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0851. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Immediate action within 24 hours is to identify all AKINSOFT Wolvox9 ERP deployments running versions s26.02.17 through s26.02.21 and implement network access restrictions to limit external connectivity to KontrolPanel.exe. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-22 – Path Traversal
View allSame technique Path Traversal
View allShare
External POC / Exploit Code
Leaving vuln.today