Vulnerability Description
Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update request to their server can prepare arbitrary XML file that will be saved in location chosen by attacker. This issue was fixed in version 2.0 build 708.
Related Weaknesses (CWE)
References
FAQ
What is CVE-2026-93571?
CVE-2026-93571 is a documented vulnerability. Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update request to their server can prepare arbitrary XML file that will be saved in locati...
How severe is CVE-2026-93571?
CVSS scoring is not yet available for CVE-2026-93571. Check NVD for updates.
Is there a patch for CVE-2026-93571?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.