Vulnerability Description
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-108140?
CVE-2026-108140 is a documented vulnerability. A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the b...
How severe is CVE-2026-108140?
CVSS scoring is not yet available for CVE-2026-108140. Check NVD for updates.
Is there a patch for CVE-2026-108140?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.