CVE-2026-5703CWE-35

CVE-2026-5703

published October 7, 2026

CVSS
7.1
EPSS
0%
Percentile
20.6
In the wild
Unconfirmed
What it is

Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the URL to include a path traversal payload. Successful exploitation of this vulnerability could allow an attacker to access critical system files containing confidential information.

The record
Technical detail
CVSS
7.1 · NONE
CVSS v4.0
7.1 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00292 · 20.6th percentile
Weakness
CWE-35 · Path Traversal: '.../...//'
Published
2026-10-07T13:17Z
References (1)
EPSS history
Timeline
  • 08 OCT 03:31Z
    EPSS moved — → 0%
    epss
  • 07 OCT 08:35Z
    Path Traversal in Satel Iberia SenNet Datalogger Serie 200
    cvelistv5