Medium severity5.3NVD Advisory· Published Mar 6, 2026· Updated Jun 15, 2026
CVE-2026-2752
CVE-2026-2752
Description
Navtor NavBox allows information disclosure via the /api/ais-data endpoint. A remote, unauthenticated attacker can send crafted requests to trigger an unhandled exception, causing the server to return verbose .NET stack traces. These error messages expose internal class names, method calls, and third-party library references (e.g., System.Data.SQLite), which may assist attackers in mapping the application's internal structure.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
2- cydome.io/vulnerability-advisory-cve-2026-2752-in-navtor-navbox-version-4-12-0-3nvdThird Party Advisory
- www.navtor.com/navtor-vendor-statementnvdVendor Advisory
News mentions
0No linked articles in our index yet.