Path Traversal Vulnerability in DigitalCanion's Web Management Portal

CVE-2026-104806

What is CVE-2026-104806?

DigitalCanion has identified a path traversal vulnerability within the Maintenance → System Logs feature of its web management portal. This security flaw allows attackers to bypass intended restrictions and access files beyond the designated directory. By exploiting the portal's inability to properly validate user-supplied file paths, an attacker can manipulate the path and gain access to potentially sensitive files stored outside the system logs directory. This could lead to unauthorized file downloads, posing significant risks to the security of the system and its applications.

References