{"id":"CVE-2026-110116","summary":"Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile","details":"Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to write arbitrary files. Attackers can send crafted fullPath and fileName parameters to POST /rest/storeFile to create or overwrite service-writable files, potentially achieving code execution.","modified":"2026-10-15T02:47:30.024194572Z","published":"2026-10-13T16:53:14.032Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110116.json","cna_assigner":"VulnCheck","cwe_ids":["CWE-22"]},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110116.json"},{"type":"ADVISORY","url":"https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/digital-infrastructure-filemanager-path-traversal-rw"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-110116"},{"type":"ADVISORY","url":"https://www.vulncheck.com/advisories/digital-infrastructure-9.6.5-through-9.6.11-path-traversal-via-filemanager-storefile"},{"type":"PACKAGE","url":"https://github.com/risesoft-y9/Digital-Infrastructure"},{"type":"ARTICLE","url":"https://github.com/risesoft-y9/Digital-Infrastructure/blob/v9.6.11/y9-digitalbase-module/y9-module-filemanager/risenet-y9boot-webapp-filemanager/src/main/java/net/risesoft/y9public/controller/Y9FileController.java#L168-L182"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/risesoft-y9/digital-infrastructure","events":[{"introduced":"e0749087e5865bd459e7794c98b0525768cd9bf0"},{"fixed":"b9dddb7c80d15c48ba912a6454fe926d6d191830"}],"database_specific":{"source":["AFFECTED_FIELD","DESCRIPTION"],"extracted_events":[{"introduced":"9.6.5"},{"last_affected":"9.6.11"},{"fixed":"9.6.11"}]}}],"versions":["v9.6.9","v9.6.8","v9.6.7","v9.6.6","v9.6.5"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-110116.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N"}]}