CVE-2026-129464 | izhaorui Zr.Admin.NET Download File /common/DownloadFile path path traversal

November 15, 2026 Yanac

A vulnerability labeled as critical has been found in izhaorui Zr.Admin.NET. This impacts an unknown function of the file /common/DownloadFile of the component Download File. Such manipulation of the argument path leads to path traversal.

This vulnerability is listed as CVE-2026-129464. The attack may be performed from remote. There is no available exploit.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More