CVE-2026-66914

Name of the Vulnerable Software and Affected Versions SEBLOD versions prior to 3.30.0 SEBLOD versions prior to 4.7.0 SEBLOD versions prior to 6.0.1

Description An unauthenticated attacker can perform a path traversal attack to download files located both inside and outside the webroot. Path traversal is a technique used to access files and directories that are stored outside the web root folder by manipulating variables that reference files with dot-dot-slash (../) sequences.

Recommendations Update SEBLOD to version 3.30.0 or later. Update SEBLOD to version 4.7.0 or later. Update SEBLOD to version 6.0.1 or later.