This site currently shows sample data for demonstration.
BDVDB
বাংলা

Vulnerabilities

CVE-2026-46747 | BDVDB-2026-339201 Detail

SiemensSINEC INS

Description#

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application does not properly sanitize path input in the `GET /api/sftp/uploadFiles` endpoint used for directory listing. This allows path traversal through crafted input, enabling access to unintended file system locations.

Impact#

Per CVSS v3.1: confidentiality impact low, integrity impact none, availability impact none. Attack vector: network.

Weaknesses#

  • CWE-26 Path Traversal: '/dir/../filename'

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.