CVE-2026-105174
Last modified
CVE-2026-105174 is a medium-severity vulnerability rated 5.4/10 on the CVSS scale. A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the file gerapy/server/core/views.py of the component Project Management.
Description
A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument project_name leads to path traversal. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. The identifier of the patch is 6e481078cfba6388a67ca2d9792288405019ba3e. Applying a patch is the recommended action to fix this issue.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| — | Gerapy | 0.9.0; 0.9.1; 0.9.2; 0.9.3; 0.9.4; 0.9.5; 0.9.6; 0.9.7; 0.9.8; 0.9.9; 0.9.10; 0.9.11; 0.9.12; 0.9.13 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-105174?
How severe is CVE-2026-105174?
How do I fix CVE-2026-105174?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-105169A security flaw has been discovered in kishor-23 food-waste-…7.3
- CVE-2026-10517Rejected reason: Retracted following review by Red Hat Produ…
- CVE-2026-105170A weakness has been identified in kishor-23 food-waste-manag…7.3
- CVE-2026-105171A security vulnerability has been detected in kishor-23 food…6.3
- CVE-2026-105172A vulnerability was detected in itsourcecode Online Admissio…7.3
- CVE-2026-105173A flaw has been found in code-projects Human Resource Manage…3.5
- CVE-2026-105175A vulnerability was found in SourceCodester Drug Recommendat…7.3
- CVE-2026-105176A vulnerability was determined in SourceCodester Drug Recomm…4.7
- CVE-2026-105177A vulnerability was identified in SourceCodester Drug Recomm…4.7
- CVE-2026-105178A security flaw has been discovered in SourceCodester Drug R…4.7
- CVE-2026-105179A weakness has been identified in SourceCodester Drug Recomm…2.7
- CVE-2026-10518GitLab has remediated an issue in GitLab EE affecting all ve…4.3
Are you affected by CVE-2026-105174?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST