← Database

CVE-2026-29201

HIGH CVSS: 8.6 Published: 2026-05-08 Modified: 2026-06-17

Description

Insufficient input validation of the feature file name in `feature::LOADFEATUREFILE` adminbin call can cause arbitrary file read when a relative file path is passed.

Affected Platforms

Unknown

Weakness Type

CWE-23

References