Skip to main content

Fujian Apex LiveBOS CVE-2026-7519

| EUVD-2026-26467 MEDIUM
Path Traversal (CWE-22)
2026-05-01 cna@vuldb.com
5.5
CVSS 4.0
Share

CVSS VectorNVD

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

4
Analysis Generated
May 01, 2026 - 01:45 vuln.today
EUVD ID Assigned
May 01, 2026 - 01:22 euvd
EUVD-2026-26467
Analysis Generated
May 01, 2026 - 01:22 vuln.today
CVE Published
May 01, 2026 - 01:16 nvd
MEDIUM 5.5

DescriptionNVD

A vulnerability has been found in Fujian Apex LiveBOS up to 2.0. Impacted is an unknown function of the file /feed/UploadImage.do of the component Endpoint. Such manipulation of the argument filename leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.1 is recommended to address this issue. Upgrading the affected component is advised.

AnalysisAI

Path traversal in Fujian Apex LiveBOS through the /feed/UploadImage.do endpoint allows remote attackers to manipulate the filename parameter and write files to arbitrary locations on the server. Versions up to 2.0 are affected. …

Sign in for full analysis, threat intelligence, and remediation guidance.

Share

CVE-2026-7519 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy