CVE-2026-19829

Name of the Vulnerable Software and Affected Versions wvp-GB28181-pro version 2.7.4-20260107

Description A path traversal flaw exists in the Log File Download Endpoint within the LogController.java file. A remote attacker can manipulate the fileName argument to access files outside the intended directory. Path traversal is a technique that allows an attacker to read arbitrary files on the server by using special characters like dot-dot-slash (../) to navigate the file system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. Avoid using the fileName argument in the Log File Download Endpoint until the issue is resolved.