Medium severity5.3NVD Advisory· Published Feb 10, 2026· Updated Apr 15, 2026

CVE-2026-25872

Description

JUNG Smart Panel KNX firmware version L1.12.22 and prior contain an unauthenticated path traversal vulnerability in the embedded web interface. The application fails to properly validate file path input, allowing remote, unauthenticated attackers to access arbitrary files on the underlying filesystem within the context of the web server. This may result in disclosure of system configuration files and other sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Jung/Smart Panel KNXllm-create
Range: <= L1.12.22

Patches

Vulnerability mechanics

References

downloads.jung.de/public/en/pdf/productdocumentation/en_sp5.1knx_09012015.pdfnvd
www.jung-group.comnvd
www.vulncheck.com/advisories/jung-smart-panel-knx-unauthenticated-path-traversalnvd
www.zeroscience.mk/en/vulnerabilities/ZSL-2026-5969.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000