Arbitrary File Read Vulnerability in OAKlouds by HGiga
CVE-2026-93468

8.7HIGH

Key Information:

Vendor

Hgiga

Status
Oaklouds-bulletin V3-2.0
Oaklouds-bulletin V3-3.0
Vendor
CVE Published:
18 September 2026

What is CVE-2026-93468?

The OAKlouds platform developed by HGiga is susceptible to an Arbitrary File Read vulnerability that allows unauthenticated remote attackers to exploit a Relative Path Traversal flaw. This could enable malicious actors to access and read sensitive system files, presenting a significant risk to data security and integrity. Organizations utilizing OAKlouds must take immediate action to mitigate this vulnerability by implementing proper security measures.

Affected Version(s)

OAKlouds-bulletin_v3-2.0 0 < 107

OAKlouds-bulletin_v3-3.0 0 < 107

References

https://www.twcert.org.tw/tw/cp-132-11210-11cb0-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-11211-d2aa9-2.html
third-party-advisory

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.