CVE-2026-101154
7.2 HIGHPublished 2026-10-06 · Updated 2026-10-07
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-22
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- HIGHCVE-2014-125130PoC
- HIGHCVE-2017-20284
- HIGHCVE-2021-48011PoC
- HIGHCVE-2023-54403PoC
- MEDIUMCVE-2024-58386PoC
- HIGHCVE-2024-58387PoC
- HIGHCVE-2024-58388PoC
- MEDIUMCVE-2025-1280
Related by shared AI tags and CWE weakness class. Browse the full archive.