← Database

CVE-2026-30996

HIGH CVSS: 7.5 Published: 2026-04-15 Modified: 2026-06-17

Description

An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET request.

Affected Platforms

Unknown

Weakness Type

CWE-22

References