CVE-2026-8023 | zephyrproject zephyr up to 4.4.x FS Handler /net/lib/http on_url path traversal

June 30, 2026 Yanac

A vulnerability classified as critical has been found in zephyrproject zephyr up to 4.4.x. Affected by this vulnerability is the function on_url of the file /net/lib/http of the component FS Handler. This manipulation causes path traversal.

This vulnerability is tracked as CVE-2026-8023. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More