CVE-2026-101082

Name of the Vulnerable Software and Affected Versions PMWeb versions 7.x through 2025.x

Description A path traversal issue exists in the processing of the 'downloader.aspx' endpoint. This occurs when the FullFileName or FileName arguments are manipulated, allowing a remote attacker to access files outside the intended directory. Path traversal is a technique used to access files and directories that are stored outside the web root folder.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.