CVE-2026-129260 | Mereithhh VanBlog up to 0.54.0 Custom Page local.provider.ts fs.readFileSync path path traversal

A vulnerability was found in Mereithhh VanBlog up to 0.54.0. It has been rated as critical. This vulnerability affects the function fs.readFileSync of the file local.provider.ts of the component Custom Page Handler. The manipulation of the argument path leads to path traversal.

This vulnerability is uniquely identified as CVE-2026-129260. The attack is possible to be carried out remotely. Moreover, an exploit is present.

Upgrading the affected component is advised.VulDB Recent EntriesRead More