CVE-2026-125385 | go2ismail Asp Net Core Inventory Order Management System up to 10.20261108 Document Image Retrieval appsettings.json Path.Combine documentName/imageName path traversal

A vulnerability classified as problematic was found in go2ismail Asp Net Core Inventory Order Management System up to 10.20261108. Impacted is the function Path.Combine of the file appsettings.json of the component Document Image Retrieval. The manipulation of the argument documentName/imageName results in path traversal.

This vulnerability is reported as CVE-2026-125385. The attack can be launched remotely. No exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More