CVE-2026-73642CWE-22path-traversal

CVE-2026-73642

published September 28, 2026

CVSS
9.2
EPSS
0%
Percentile
35.6
In the wild
Unconfirmed
What it is

Dayforce ESS Excelity is vulnerable to Path Traversal  in file download functionality. An unauthenticated attacker can sent GET request with file path parameter set to any path including an absolute

local file path.

This issue was fixed in version V4.

The record
Technical detail
CVSS
9.2 · NONE
CVSS v4.0
9.2 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
EPSS
0.00424 · 35.6th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-09-28T18:17Z
References (2)
https://cert.pl/en/posts/2026/09/CVE-2026-73640 · [email protected]https://hcm.excelityglobal.com/ESS · [email protected]
EPSS history
Timeline
  • 30 SEP 03:28Z
    EPSS moved — → 0%
    epss
  • 28 SEP 13:12Z
    Path Traversal in Dayforce Payroll
    cvelistv5