Path Traversal Vulnerability in Gibbon by GibbonEdu
CVE-2026-8209
6.9MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2026-8209?
A path traversal vulnerability exists in Gibbon versions prior to v30.0.01, which can be exploited by users with Teacher or higher privileges. This flaw allows unauthorized access to sensitive files within the web application. Specifically, an attacker can induce a denial-of-service condition by manipulating file extraction processes, resulting in the deletion of critical PHP files. Such exploitation compromises the availability of the web application, potentially impacting user experience and operational functionality.
Affected Version(s)
gibbon 0 < 30.0.01
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.