Is CVE-2026-82460 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-82460?

CVE-2026-82460 has a CVSS v3 severity of CRITICAL (9.8).

Back

CVE-2026-82460

Description

Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory.