CVE-2026-36851CWE-22path-traversal

CVE-2026-36851

High · published August 26, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
43.5
In the wild
Unconfirmed
What it is

Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00522 · 43.5th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-08-26T23:16Z
References (3)
https://github.com/SyntaxSaiyan/CVE-2026-36851 · [email protected]https://github.com/unpoller/unpoller · [email protected]https://github.com/SyntaxSaiyan/CVE-2026-36851 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 28 AUG 06:39Z
    EPSS moved — → 0%
    epss
  • 26 AUG 00:00Z
    Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration
    cvelistv5