Absolute Path Traversal Vulnerability in Navtor NavBox

CVE-2026-2753

What is CVE-2026-2753?

An Absolute Path Traversal vulnerability in Navtor NavBox allows unauthenticated remote attackers to exploit the application's HTTP service. By submitting malicious requests containing absolute filesystem paths, attackers can bypass security measures and access restricted files on the server. This vulnerability can lead to the disclosure of sensitive configuration files and critical system information, posing significant risks to the affected systems. Organizations using this application should prioritize implementing appropriate security measures to mitigate potential exploit risks.

References