CVE-2026-93468CWE-23

CVE-2026-93468

High · published September 18, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
51.7
In the wild
Unconfirmed
What it is

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00676 · 51.7th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2026-09-18T07:16Z
References (2)
https://www.twcert.org.tw/en/cp-139-11211-d2aa9-2.html · [email protected]https://www.twcert.org.tw/tw/cp-132-11210-11cb0-1.html · [email protected]
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 18 SEP 02:19Z
    HGiga｜OAKlouds - Arbitrary File Read
    cvelistv5