Vulnerability Description
OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via import_link().
CVSS Score
8.1
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Related Weaknesses (CWE)
References
- https://github.com/helloxz/onenav/releases/tag/1.2.4
- https://github.com/returnwrong/returnwrong-security-advisories/blob/main/CVE-202
- https://github.com/returnwrong/returnwrong-security-advisories/blob/main/CVE-202
FAQ
What is CVE-2026-75464?
CVE-2026-75464 is a vulnerability with a CVSS score of 8.1 (HIGH). OneNav 1.2.4 contains an authenticated arbitrary file deletion vulnerability via import_link().
How severe is CVE-2026-75464?
CVE-2026-75464 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2026-75464?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.