Which versions of Thingsgateway are affected by CVE-2026-4233?

Organizations using A vulnerability should be aware of moderate risk from CVE-2026-4233, a path traversal vulnerability rated CVSS 4.3. This could allow unauthorized file access.

Is there a public PoC exploit available for CVE-2026-4233?

Yes, a public proof-of-concept exploit is available for CVE-2026-4233. Prioritise patching immediately. EPSS: 0.0%.

Thingsgateway CVE-2026-4233

Q: What is the CVSS score of CVE-2026-4233?

CVE-2026-4233 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.0%.

EUVD-2026-12399 LOW

Path Traversal (CWE-22)

2026-03-16 VulDB

Path Traversal Thingsgateway

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:11 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:11 NVD

5.3 (MEDIUM) 2.1 (LOW)

CVSS changed

Apr 22, 2026 - 21:37 NVD

4.3 (MEDIUM) 5.3 (MEDIUM)

PoC Detected

Mar 16, 2026 - 14:53 vuln.today

Public exploit code

EUVD ID Assigned

Mar 16, 2026 - 11:00 euvd

EUVD-2026-12399

Analysis Generated

Mar 16, 2026 - 11:00 vuln.today

CVE Published

Mar 16, 2026 - 10:02 nvd

MEDIUM 4.3

DescriptionCVE.org

A vulnerability was identified in ThingsGateway 12. This affects an unknown part of the file /api/file/download. The manipulation of the argument fileName leads to path traversal. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Path traversal in ThingsGateway 12's /api/file/download endpoint allows authenticated users to read arbitrary files through manipulation of the fileName parameter. Public exploit code exists for this vulnerability, and no patch is currently available from the vendor despite early notification.

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Vulnerability AssessmentAI

Risk Assessment	The CVSS 4.3 score reflects a low-to-moderate severity profile: network-accessible attack (AV:N), low complexity (AC:L), requiring login credentials (PR:L), no user interaction (UI:N), and limited scope/confidentiality impact (S:U/C:L). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	An authenticated attacker with valid login credentials to ThingsGateway 12 crafts a request to /api/file/download with a malicious fileName parameter such as '../../etc/passwd' or '..\..\windows\win.ini', bypassing directory restrictions and retrieving sensitive system files. Since the vulnerability requires low-complexity network access and only valid authentication (not admin privileges), an attacker with a basic user account or compromised credential can enumerate and extract configuration files, private keys, or application code. …
Remediation	Upgrade ThingsGateway to a patched version if available from the upstream project; check the official ThingsGateway repository (typically on GitHub) for security releases addressing CVE-2026-4233. … Detailed patch versions, workarounds, and compensating controls in full report.

Recommended ActionAI

Within 30 days: Identify affected systems and apply vendor patches as part of regular patch cycle. …

Threat intelligence, references, and detailed analysis are available after sign-in.

CVE-2026-4233 vulnerability details – vuln.today

Back