CVE-2026-92970CWE-22path-traversal

CVE-2026-92970

High · published September 17, 2026

CVSS v3.1
8.8
EPSS
1%
Percentile
56.8
In the wild
Unconfirmed
What it is

HUBzero CMS through 2.2.32 contains a path traversal vulnerability in project file upload handlers that allows authenticated project members to write arbitrary files outside the project repository. Attackers can supply traversal sequences in upload parameters to write files to attacker-chosen paths with web server privileges, potentially enabling code execution.

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00820 · 56.8th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2026-09-17T18:18Z
References (7)
https://github.com/hubzero/hubzero-cms · [email protected]https://github.com/hubzero/hubzero-cms/blob/v2.2.32/core/components/com_projects/api/controllers/filesv1_0.php#L809-L880 · [email protected]https://github.com/hubzero/hubzero-cms/blob/v2.2.32/core/libraries/Hubzero/Filesystem/Entity.php#L53-L73 · [email protected]https://github.com/hubzero/hubzero-cms/blob/v2.2.32/core/plugins/projects/files/connections.php#L812-L815 · [email protected]https://github.com/hubzero/hubzero-cms/commit/4a58215463e5d42f8d03567358171383da939946 · [email protected]https://github.com/hubzero/hubzero-cms/commit/5b4c4aefedf647390465cdfd0e7fa626c3e1cb39 · [email protected]https://www.vulncheck.com/advisories/hubzero-cms-through-2.2.32-path-traversal-via-file-upload · [email protected]
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 1%
    epss
  • 17 SEP 13:43Z
    HUBzero CMS through 2.2.32 Path Traversal via File Upload
    cvelistv5