CVE-2026-19326
Last modified
CVE-2026-19326 is a medium-severity vulnerability rated 4.4/10 on the CVSS scale. A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1. This vulnerability affects the function deleteImage of the file ai-doctor-server/src/filemanagement/filemanagement.service.ts. EPSS estimates a 0.14% chance of exploitation in the next 30 days.
Description
A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1. This vulnerability affects the function deleteImage of the file ai-doctor-server/src/filemanagement/filemanagement.service.ts. Performing a manipulation of the argument imagePath results in path traversal. The attack must be initiated from a local position. The project was informed of the problem early through an issue report but has not responded yet.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Jevon-Zhong | Ai-doctor | 0.0.1 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-19326?
How severe is CVE-2026-19326?
How do I fix CVE-2026-19326?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-19318A stack-based buffer overflow vulnerability in the WatchGuar…9.3
- CVE-2026-1932The Appointment Booking Calendar Plugin – Bookr plugin for W…5.3
- CVE-2026-19321Power Systems Firmware FW1120.00, FW1110.00 through FW1110.3…6.7
- CVE-2026-19323A security flaw has been discovered in azer react-analyzer-m…5.3
- CVE-2026-19324A weakness has been identified in HelloGGX shadcn-vue-mcp up…3.3
- CVE-2026-19325A security vulnerability has been detected in IncomeStreamSu…5.3
- CVE-2026-19327A flaw has been found in abracadabra50 claude-sesh 1.0.0. Th…5.3
- CVE-2026-19328A vulnerability has been found in aktsmm skill-ninja-mcp-ser…5.3
- CVE-2026-19329A vulnerability was found in andreahaku codex_mcp up to 1ff5…5.3
- CVE-2026-1933A flaw was found in Samba’s handling of NTFS-style reparse p…6.5
- CVE-2026-19330A vulnerability was determined in angrysky56 advanced-reason…5.3
- CVE-2026-19331A vulnerability was identified in bazylhorsey obsidian-mcp-s…5.3
Are you affected by CVE-2026-19326?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST