CVE-2026-110115 | Risesoft Digital-Infrastructure up to 9.6.11 File Manager /rest/retrieveFileStream Y9FileController.retrieveFileStream fullPath/fileName path traversal

October 13, 2026 Yanac

A vulnerability has been found in Risesoft Digital-Infrastructure up to 9.6.11 and classified as problematic. This impacts the function Y9FileController.retrieveFileStream of the file /rest/retrieveFileStream of the component File Manager. The manipulation of the argument fullPath/fileName leads to path traversal.

This vulnerability is listed as CVE-2026-110115. The attack may be initiated remotely. There is no available exploit.VulDB Recent EntriesRead More