Critical Alert 1 Active Exploit Detected Today

CVE-2026-35273 — Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability →
Powered by CVE Watchtower
×
June 13, 2026

CVE Watchtower


← Back to CVE List

CVE-2024-7399NVD

Vulnerability Summary

Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1050 allows attackers to write arbitrary file as system authority.
Severity Level
HIGH(8.8)
Published Date
Aug 12, 2024
Last Modified
Apr 24, 2026
Exploitation Status
????
EPSS Score (30-Day)
70.71%Probability
Root Weakness (CWE)
CWE-22: Path Traversal ↗
The software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh

External References