Akinsoft Wolvox9 Erp Kontrolpanel Exe
Monthly
Path traversal in AKINSOFT Wolvox9 ERP's KontrolPanel.exe component exposes arbitrary server-side files to unauthenticated remote attackers via unsanitized file path inputs. Affected deployments span versions s26.02.17 through s26.02.21, with a confirmed fix in version 26.02.22 per TR-CERT advisory TR-26-0851. No public exploit code or CISA KEV listing has been identified at time of analysis, but the PR:N/AC:L CVSS profile (7.5 High, C:H) means exploitation requires no specialized knowledge or credentials - any attacker with network reach to the service can trivially exfiltrate sensitive ERP data.
Path traversal in AKINSOFT Wolvox9 ERP's KontrolPanel.exe component exposes arbitrary server-side files to unauthenticated remote attackers via unsanitized file path inputs. Affected deployments span versions s26.02.17 through s26.02.21, with a confirmed fix in version 26.02.22 per TR-CERT advisory TR-26-0851. No public exploit code or CISA KEV listing has been identified at time of analysis, but the PR:N/AC:L CVSS profile (7.5 High, C:H) means exploitation requires no specialized knowledge or credentials - any attacker with network reach to the service can trivially exfiltrate sensitive ERP data.