Path Traversal Vulnerability in SS1 and ODM Product rocoeyes
CVE-2026-113437

6.9MEDIUM

Key Information:

Vendor

Dos Co., Ltd.

Status
Ss1
Ss1 Cloud
Rocoeyes
Vendor
CVE Published:
9 November 2026

What is CVE-2026-113437?

A path traversal vulnerability has been identified in the SS1 and SS1 Cloud solutions provided by DOS Co., Ltd., as well as the ODM product rocoeyes from Rococo Co., Ltd. This security flaw allows unauthorized users to manipulate file paths, potentially enabling them to delete arbitrary files on the affected systems. Proper security measures are essential to mitigate the risks associated with this vulnerability.

Affected Version(s)

rocoeyes 0

SS1 0

SS1 Cloud 0

References

https://www.dos-osaka.co.jp/news/2026/11/261109.html
https://www.rococo.co.jp/wp-content/uploads/2026/11/20261...
https://jvn.jp/en/jp/JVN76179675/

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

CVSS V3.0

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.