SEPTEMBER 17, 2026
Live Feed
Back to database
Case File

CVE-2026-67395

MEDIUM · CVSS 5.9 EPSS 0.84% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-09-01 · Last synced 2026-09-17

CyberRota Analysis

AI-Generated

A path traversal vulnerability in Sage Employee Self Service allows attackers to exploit improper validation of file path parameters, potentially gaining access to sensitive files outside the application's intended scope. Successful exploitation could lead to the disclosure of critical information, such as configuration files and application logs, depending on the privileges of the compromised component. Organizations using this application should prioritize remediation to mitigate the risk of unauthorized data exposure.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-67395
Severity
MEDIUM
CVSS
5.9
EPSS
0.84%

Original NVD Description

A path traversal vulnerability exists in Sage Employee Self Service’s custom logo functionality due to improper validation of file path parameters. By leveraging directory traversal sequences and their encoded variants, an attacker may bypass directory restrictions and access files outside the application's intended file system scope. Successful exploitation would require knowledge of valid file names and paths. Depending on the privileges of the affected component, exploitation could result in the disclosure of sensitive information, including configuration files, environment settings, application assets, and log data. The vulnerability has been remediated through enhanced path validation and secure path resolution controls that prevent access to unauthorised locations.