Is there a public PoC exploit available for EUVD-2026-23811?

Yes, a public proof-of-concept exploit is available for EUVD-2026-23811. Prioritise patching immediately. EPSS: 0.1%.

Java EUVD-2026-23811

Q: What is the CVSS score of EUVD-2026-23811?

EUVD-2026-23811 has a CVSS 4.0 base score of 2.1 (Low). CVSS vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X. EPSS exploitation probability: 0.1%.

| CVE-2026-6620 LOW

Path Traversal (CWE-22)

2026-04-20 VulDB

GHSA-8v5m-jghx-mmxr

Java Path Traversal File Upload Sonic Server Soniccloudorg

2.1

CVSS 4.0 · NVD

Severity by source

NVD PRIMARY

2.1 LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Severity Changed

Apr 29, 2026 - 01:12 NVD

MEDIUM LOW

CVSS changed

Apr 29, 2026 - 01:12 NVD

5.3 (MEDIUM) 2.1 (LOW)

PoC Detected

Apr 29, 2026 - 01:00 vuln.today

Public exploit code

CVSS changed

Apr 20, 2026 - 09:37 NVD

6.3 (MEDIUM) 5.3 (MEDIUM)

Analysis Generated

Apr 20, 2026 - 08:58 vuln.today

EUVD ID Assigned

Apr 20, 2026 - 08:45 euvd

EUVD-2026-23811

Analysis Generated

Apr 20, 2026 - 08:45 vuln.today

CVE Published

Apr 20, 2026 - 08:15 nvd

LOW 2.1

DescriptionCVE.org

A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0. The affected element is the function Upload of the file FileTool.java of the component File Upload Endpoint. The manipulation of the argument Type results in path traversal. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.

AnalysisAI

Remote authenticated path traversal in SonicCloudOrg sonic-server up to version 2.0.0 allows attackers with low-level privileges to manipulate the Type parameter in the File Upload Endpoint (FileTool.java) to traverse the filesystem and read or write arbitrary files. The vulnerability has publicly available exploit code and affects all versions up to 2.0.0; the vendor has not responded to early disclosure attempts, leaving no patch available.

Technical ContextAI

SonicCloudOrg sonic-server is a cloud-based testing platform written in Java. The vulnerability exists in the Upload function of FileTool.java, which handles file upload operations through a web endpoint. The root cause is improper validation of the Type parameter (CWE-22: Improper Limitation of a Pathname to a Restricted Directory), allowing directory traversal sequences (e.g., ../) to be passed through to file operations without sanitization. This permits attackers to escape intended upload directories and access arbitrary locations in the filesystem. The affected component is the File Upload Endpoint, a critical attack surface in web applications handling user-supplied files.

RemediationAI

No vendor-released patch is available; the vendor did not respond to early disclosure. Immediate mitigation options include: (1) Upgrade to a patched version if released after this analysis (check SonicCloudOrg official repository for version > 2.0.0); (2) If upgrade is impossible, restrict network access to the File Upload Endpoint to trusted internal networks only, using firewall rules or reverse proxy authentication; (3) Disable file upload functionality entirely if not essential to operations; (4) Implement strict input validation on the Type parameter at the application level to reject any path traversal sequences (../, .\, encoded variants); (5) Run sonic-server with minimal filesystem permissions, restricting the process to a dedicated directory tree with no access to sensitive system files. Note: Compensating controls (2-5) reduce but do not eliminate risk-upgrading remains the preferred long-term solution. Monitor for vendor updates at the official SonicCloudOrg repository.