Path Traversal Vulnerability in BugTracker.NET by Interneer

CVE-2026-92533

What is CVE-2026-92533?

A path traversal vulnerability exists within BugTracker.NET's file download component, allowing an authenticated remote attacker to exploit improper validation of user-supplied paths. By manipulating the file name parameter, an attacker may gain unauthorized access to files stored outside the designated directory. This could enable the attacker to read sensitive system files that are accessible to the user account executing the application, posing a significant security risk.

References