SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2025-70819

MEDIUM · CVSS 6.3 EPSS 0.11%

Source: NVD + CISA KEV + EPSS · Published 2026-09-13 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

Zettlab D6 Ultra versions prior to 1.7.0 are vulnerable to directory traversal attacks that allow unauthorized access to sensitive files, specifically /etc/passwd and /etc/shadow, when improperly configured volumes are used in container deployments. This could lead to the exposure of user credentials and system information, potentially compromising the integrity and confidentiality of the system. Organizations utilizing this software should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2025-70819
Severity
MEDIUM
CVSS
6.3
EPSS
0.11%

Original NVD Description

Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../../../../../etc:/h_etc:rw in a compose file.