Relative Path Traversal Vulnerability in MicroRealEstate by MicroRealEstate
CVE-2026-57871

7.1HIGH

Key Information:

Vendor

Microrealestate

Status
Microrealestate
Vendor
CVE Published:
7 July 2026

What is CVE-2026-57871?

A relative path traversal vulnerability has been identified in the MicroRealEstate file upload functionality. This flaw could allow attackers to manipulate file paths in a way that leads to the potential overwriting of system files, posing significant risks to the integrity and security of the affected system. It is crucial for users of MicroRealEstate versions up to 1.0.0-alpha3 to review and mitigate this vulnerability to prevent unauthorized file modifications.

Affected Version(s)

MicroRealEstate 0 <= 1.0.0-alpha3

References

https://github.com/microrealestate/microrealestate
product
https://www.themissinglink.com.au/security-advisories/cve...
third-party-advisory

CVSS V4

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Jake Cleland
.