VYPR

munin-httpd

by Munin Monitoring

CVEs (1)

  • CVE-2026-125357MedNov 10, 2026
    risk 0.27cvss 5.3epss —

    Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal vulnerability in the static file handler of Munin::Master::HTML::handle_request that allows unauthenticated attackers to read files outside the static directory. Attackers can request /static/../ to bypass…