CVE-2024-27120

A Local File Inclusion vulnerability has been found in ComfortKey, a product of Celsius Benelux. Using this vulnerability, an unauthenticated attacker may retrieve sensitive information about the underlying system. The vulnerability has been remediated in version 24.1.2.

• CWE-200
• CWE-22

• https://csirt.divd.nl/CVE-2024-27120Third Party Advisory
• https://csirt.divd.nl/DIVD-2024-00031/Third Party Advisory

Published

Aug 14, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-27110Elevation of privilege vulnerability in GE HealthCare EchoPA…8.4
• CVE-2024-27112A unauthenticated SQL Injection has been found in the SO Pla…9.8
• CVE-2024-27113An unauthenticated Insecure Direct Object Reference (IDOR) t…9.8
• CVE-2024-27114A unauthenticated Remote Code Execution (RCE) vulnerability …9.8
• CVE-2024-27115A unauthenticated Remote Code Execution (RCE) vulnerability …9.8
• CVE-2024-2712A vulnerability, which was classified as critical, has been …6.5
• CVE-2024-27121Path traversal vulnerability exists in Machine Automation Co…7.2
• CVE-2024-27122A cross-site scripting (XSS) vulnerability has been reported…5.4
• CVE-2024-27123A cross-site scripting (XSS) vulnerability has been reported…5.2
• CVE-2024-27124An OS command injection vulnerability has been reported to a…7.5
• CVE-2024-27125A cross-site scripting (XSS) vulnerability has been reported…4.8
• CVE-2024-27126A cross-site scripting (XSS) vulnerability has been reported…5.4