Medium severity5.3NVD Advisory· Published Aug 14, 2026· Updated Aug 14, 2026

CVE-2026-19827

Description

A flaw has been found in alldatacenter alldata up to 0.6.8. This impacts the function FileInputStream of the file /admin/controller/JobLogController.java of the component logDetailCat Endpoint. This manipulation of the argument executorAddress causes path traversal. It is possible to initiate the attack remotely. The exploit has been published and may be used. The project closed the issue report as "not planned" without any further explanation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Alldatacenter/alldatallm-fuzzy
Range: <0.6.8

Patches

Vulnerability mechanics

References

github.com/alldatacenter/alldata/issues/834nvd
vuldb.com/cve/CVE-2026-19827nvd
vuldb.com/submit/870238nvd
vuldb.com/vuln/389960nvd
vuldb.com/vuln/389960/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000