CVE-2026-25069

2026-02-01 [email protected]

Lifecycle Timeline

3
Analysis Generated
Mar 12, 2026 - 22:01 vuln.today
PoC Detected
Feb 03, 2026 - 16:44 vuln.today
Public exploit code
CVE Published
Feb 01, 2026 - 00:16 nvd
N/A

Description

SunFounder Pironman Dashboard (pm_dashboard) version 1.3.13 and prior contain a path traversal vulnerability in the log file API endpoints. An unauthenticated remote attacker can supply traversal sequences via the filename parameter to read and delete arbitrary files. Successful exploitation can disclose sensitive information and delete critical system files, resulting in data loss and potential system compromise or denial of service.

Analysis

SunFounder Pironman Dashboard (pm_dashboard) version 1.3.13 and prior contain a path traversal vulnerability in the log file API endpoints. An unauthenticated remote attacker can supply traversal sequences via the filename parameter to read and delete arbitrary files.

Sign in for full analysis, threat intelligence, and remediation guidance.

Priority Score

20
Low Medium High Critical
KEV: 0
EPSS: +0.2
CVSS: +0
POC: +20

Share

CVE-2026-25069 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy