Path Traversal Vulnerability in SSH Server Affecting CERTVDE Products
CVE-2026-27557
7.5HIGH
What is CVE-2026-27557?
A path traversal vulnerability exists in the CERTVDE SSH Server's /index.php/view_uploaded_iodd_file endpoint, enabling unauthenticated remote attackers to read the private keys of the SSH server. This could lead to unauthorized access to sensitive data and critical systems.
Affected Version(s)
ICE2-8IOL-G65L-V1D 1.0.0 < 1.7.4
ICE2-8IOL-K45P-RJ45 1.0.0 < 1.7.4
ICE2-8IOL-K45S-RJ45 1.0.0 < 1.7.4
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Gabriele Quagliarella from Nozomi Networks
Luca Borzacchiello from Nozomi Networks