CVE-2026-8209CWE-23

Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed…

Medium · published May 9, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
31.4
In the wild
Unconfirmed
What it is

Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed .zip extraction results in deletion of the file and a DOS condition. Successful exploitation requires Teacher or higher privileges. Exploitation could result in loss of availability of the web application.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
EPSS
0.00385 · 31.4th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2026-05-09T03:19Z
EPSS history
Timeline
  • 09 MAY 03:19Z
    Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed…
    cvelistv5