CVE-2026-9102
Last modified
CVE-2026-9102 is a critical-severity vulnerability rated 9.4/10 on the CVSS scale. A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to missing filename sanitization in the Gerber file upload APIs. A regular authenticated workspace user can supply a crafted filename in the multipart Content-Disposition header to escape the intended temporary upload directory and write arbitrary files to any location on the server filesystem. Because content-controlled files can be written to web-accessible directories, this can be escalated to remote code execution in the context of the service account. EPSS estimates a 0.56% chance of exploitation in the next 30 days.
Description
A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to missing filename sanitization in the Gerber file upload APIs. A regular authenticated workspace user can supply a crafted filename in the multipart Content-Disposition header to escape the intended temporary upload directory and write arbitrary files to any location on the server filesystem. Because content-controlled files can be written to web-accessible directories, this can be escalated to remote code execution in the context of the service account. It can also be used to overwrite application binaries or configuration files, leading to service takeover or denial of service.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-9102?
How severe is CVE-2026-9102?
How do I fix CVE-2026-9102?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-9096Casdoor versions 2.362.0 and earlier do not enforce SAML ass…7.5
- CVE-2026-9097Casdoor versions 2.362.0 and earlier do not verify that a JW…9.8
- CVE-2026-9098In Casdoor versions 2.362.0 and earlier, the SAML callback h…9.1
- CVE-2026-9099A flaw was found in Keycloak. A missing authorization check …7.7
- CVE-2026-9100The MongoDB C Driver's legacy GridFS API accepts malformed f…6
- CVE-2026-9101Prototype pollution in csv parsing logic during import can l…5.3
- CVE-2026-9103IBM Langflow OSS 1.0.0 through 1.10.0 could allow a remote a…9.8
- CVE-2026-9104The Draft List plugin for WordPress is vulnerable to Stored …6.4
- CVE-2026-9105An authenticated stack-based buffer overflow vulnerability e…6.5
- CVE-2026-9106A UI misrepresentation vulnerability was identified in GitHu…5.5
- CVE-2026-9107The Kali Forms — Contact Form & Drag-and-Drop Builder plugin…6.4
- CVE-2026-9108A path traversal security issue exists within Studio 5000 Lo…5.4
Are you affected by CVE-2026-9102?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST