60
CVE-2026-29201
- CVSS 3.1
- 8.6 high
- EPSS
- <1%p37
- Published
- ·
- Modified
Description · NVD
Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call can cause arbitrary file read when a relative file path is passed.
- Weakness
- CWE-23
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L