CVE-2026-82635 | tw93 Pake up to 3.13.0 Download File Command download_file filename path traversal

August 30, 2026 Yanac

A vulnerability described as critical has been identified in tw93 Pake up to 3.13.0. This vulnerability affects the function download_file of the component Download File Command. Such manipulation of the argument filename leads to path traversal.

This vulnerability is documented as CVE-2026-82635. The attack can be executed remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More