https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:25:03.137507+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-27022 CVE-2025-27022 — Path Traversal Vulnerability in Infinera G42 2026-10-06T22:25:03.154787+00:00

Affected: Infinera G42

A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests.

Details:

Lack or insufficient validation of user-supplied input allows authenticated users to access all files on the target machine file system that are readable to the user account used to run the httpd service.