Medium severity5.3NVD Advisory· Published Oct 5, 2026
CVE-2026-100727
CVE-2026-100727
Description
An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the file upload setting is configured as "Local".
Affected products
1Patches
Vulnerability mechanics
References
2News mentions
0No linked articles in our index yet.