VYPR

Titan Master

by NetNumber

CVEs (1)

  • CVE-2019-25610MedMar 22, 2026
    risk 0.42cvss 6.5epss 0.00

    NetNumber Titan Master 7.9.1 contains a path traversal vulnerability in the drp endpoint that allows authenticated users to download arbitrary files by injecting directory traversal sequences. Attackers can manipulate the path parameter with base64-encoded payloads containing ../ sequences to bypass authorization and retrieve sensitive system files like /etc/shadow.