CVE-2026-79318

Summary

web2py 3.2.2-stable (commit a7330a2bf21219fa77860b6665de927dd4f98e6d) is vulnerable to Directory Traversal in read_file()/write_file() (applications/admin/controllers/webservices.py).

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

References

• https://github.com/web2py/web2py
• https://github.com/lichoin/TraceLoom/blob/main/CVEs/CVE-2026-79318.md

• ←Previous
• Next→