WebDAV Copy Operation Handler Vulnerability in Sigoden Dufs
CVE-2026-129355

6.9MEDIUM

Key Information:

Vendor

Sigoden

Status
Dufs
Vendor
CVE Published:
15 November 2026

What is CVE-2026-129355?

An improper authorization vulnerability exists in the WebDAV COPY operation handler of Sigoden Dufs up to version 0.46.0. This weakness allows attackers to manipulate authorization processes, potentially enabling remote exploitation. It is crucial to upgrade to version 0.47.0 or later to address this security issue effectively. The associated patch identifier is fba13dffb9c65b5e5e26419f64de709200277a04, which should be applied to safeguard systems against unauthorized access.

Affected Version(s)

dufs 0.1

dufs 0.2

dufs 0.3

References

https://vuldb.com/vuln/437418
vdb-entry
https://vuldb.com/vuln/437418/cti
signaturepermissions-required
https://vuldb.com/cve/CVE-2026-129355
third-party-advisory

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

alexandrealvees (VulDB User)
.