Is CVE-2026-9166 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-9166?

CVE-2026-9166 has a CVSS v3 severity of HIGH (7.5).

Back

CVE-2026-9166

Description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.