Medium severity6.5NVD Advisory· Published Jul 14, 2026· Updated Jul 14, 2026
CVE-2026-11944
CVE-2026-11944
Description
openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionality that allows an authenticated attacker to read arbitrary files on the server via crafted path traversal sequences.
Affected products
1Patches
Vulnerability mechanics
References
1- fluidattacks.com/es/advisories/totonvdThird Party AdvisoryExploit
News mentions
0No linked articles in our index yet.