CVE-2026-103648 | demsking image-downloader up to 4.3.0 download URL path traversal

October 2, 2026 Yanac

A vulnerability described as critical has been identified in demsking image-downloader up to 4.3.0. This impacts an unknown function. Such manipulation of the argument download URL leads to path traversal.

This vulnerability is referenced as CVE-2026-103648. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More