CVE-2026-7271

A vulnerability was detected in DV0x creative-ad-agent up to 751b9e5146604dc65049bd0f62dcbdad6212f8a3. Impacted is an unknown function of the file server/sdk-server.ts of the component creative-ad-agent-server. Performing a manipulation of the argument req.params results in path traversal. Remote exploitation of the attack is possible. The exploit is now public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The patch is named 3d255865a957f3740b8724dd914502c0f44d4970. Applying a patch is the recommended action to fix this issue.

• CWE-22

• https://github.com/DV0x/creative-ad-agent/
• https://github.com/DV0x/creative-ad-agent/commit/3d255865a957f3740b8724dd914502c0f44d4970
• https://github.com/DV0x/creative-ad-agent/issues/1
• https://vuldb.com/submit/802887
• https://vuldb.com/vuln/359926
• https://vuldb.com/vuln/359926/cti

Published

Apr 28, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-72690An improper authorization vulnerability in Attendize through…7.1
• CVE-2026-72691An authentication bypass vulnerability in OpenSignLabs opens…7.5
• CVE-2026-72692A missing authorization vulnerability in OpenSignLabs opensi…7.5
• CVE-2026-72693`openvt -u` is intended to identify the owner of the current…7.8
• CVE-2026-72694A flaw was found in MRTG. When the MRTG daemon is started as…7.1
• CVE-2026-7270An operator precedence bug in the kernel results in a scenar…7.8
• CVE-2026-72712Nmap versions up to and including 7.99 contains a denial of …6.5
• CVE-2026-72713XAgent contains a path traversal vulnerability in the worksp…8.7
• CVE-2026-72718goose is general-purpose AI agent that runs on your machine.…7
• CVE-2026-72719Chatwoot is a customer engagement suite. Prior to 4.9.0, Cha…6.7
• CVE-2026-7272A flaw has been found in WilliamCloudQi matlab-mcp-server up…7.3
• CVE-2026-72720Discourse is an open-source discussion platform. Prior to 20…6.4