Unrated severityNVD Advisory· Published Jul 14, 2026· Updated Jul 14, 2026
openSIS Classic 9.3 - Authenticated path traversal in SentMail attachment download
CVE-2026-11944
Description
openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionality that allows an authenticated attacker to read arbitrary files on the server via crafted path traversal sequences.
Affected products
1Patches
Vulnerability mechanics
References
1- fluidattacks.com/es/advisories/totomitrethird-party-advisory
News mentions
0No linked articles in our index yet.