Unauthenticated Path Traversal in CustomSounds by Vendor

CVE-2026-56845

What is CVE-2026-56845?

A path traversal vulnerability exists in CustomSounds, which allows unauthenticated attackers to exploit the application's FileSystem configuration. By manipulating the request path with '../' sequences, attackers can access and read arbitrary files located outside the designated directory. This vulnerability poses a risk as sensitive information may be exposed without any authentication required. Protecting against this risk involves ensuring that input validation and proper access controls are implemented to restrict file access locations.

References