Path Traversal Vulnerability in Risesoft-y9 Digital-Infrastructure Product
CVE-2026-110116
8.8HIGH
What is CVE-2026-110116?
Risesoft-y9 Digital-Infrastructure versions 9.6.5 through 9.6.11 exhibit a path traversal vulnerability in the fileManager's storeFile endpoint. This flaw permits unauthorized attackers to craft requests manipulating the fullPath and fileName parameters. By exploiting this vulnerability, an attacker can send a POST request to /rest/storeFile, enabling them to write or overwrite files stored on the server. This could potentially lead to serious security risks, including the execution of arbitrary code within the application.
Affected Version(s)
Digital-Infrastructure 9.6.5 <= 9.6.11