← Database

CVE-2026-104989

N/A CVSS: N/A Published: 2026-11-09 Modified: 2026-11-09

Description

Uncontrolled search path element in package upload feature in Chaos Software V-Ray versions through 2.0.19 allows remote unauthenticated attackers to execute arbitrary code via redirecting access to libraries

Affected Platforms

Unknown

Weakness Type

CWE-427

References