What is the CVSS score of CVE-2026-30283?

CVE-2026-30283 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

N A CVE-2026-30283

EUVD-2026-17544 CRITICAL

Path Traversal (CWE-22)

2026-03-31 mitre

Path Traversal RCE Information Disclosure N A

9.8

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from Vendor (mitre) · only source for this CVE.

CVSS VectorVendor: mitre

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

EUVD ID Assigned

Mar 31, 2026 - 18:16 euvd

EUVD-2026-17544

Analysis Generated

Mar 31, 2026 - 18:16 vuln.today

CVE Published

Mar 31, 2026 - 00:00 nvd

CRITICAL 9.8

DescriptionCVE.org

An arbitrary file overwrite vulnerability in PEAKSEL D.O.O. NIS Animal Sounds and Ringtones v1.3.0 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

AnalysisAI

Arbitrary file overwrite in PEAKSEL D.O.O. NIS Animal Sounds and Ringtones v1.3.0 allows attackers to overwrite critical internal files during the file import process, enabling remote code execution or sensitive information exposure. The vulnerability affects the application's import functionality without requiring authentication. No public exploit code or active exploitation has been independently confirmed at the time of analysis.

Technical ContextAI

This vulnerability exists in the file import mechanism of PEAKSEL D.O.O. NIS Animal Sounds and Ringtones application. The root cause involves insufficient validation of file paths during the import process, allowing attackers to specify arbitrary file paths that bypass intended directory restrictions. The application fails to properly sanitize or validate user-supplied file paths before writing imported content to the filesystem, permitting path traversal or direct overwrites of sensitive application files. The CWE classification was not provided in available data, but this vulnerability pattern typically relates to improper input validation (CWE-22: Improper Limitation of a Pathname to a Restricted Directory) combined with unsafe file operations. The import functionality accepts user-controlled file specifications without adequate access controls or path normalization.

RemediationAI

Immediate remediation requires contacting PEAKSEL D.O.O. at https://peaksel.com/ to obtain and deploy a patched version of NIS Animal Sounds and Ringtones addressing the arbitrary file overwrite vulnerability. No vendor-released patch information is available in the provided data, and the application version affected is 1.3.0. Users should immediately cease use of the file import functionality in v1.3.0 until a patched version is available. Monitor the Secsys-FDU research repository (https://github.com/Secsys-FDU/AF_CVEs/issues/26) for vendor security updates and patch availability announcements. If the application is non-critical to operations, consider uninstalling v1.3.0 until remediation is published.