critical9.9
CVE-2026-0963
An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated attacker to perform fil…
Impact
An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Craftycontrol | Crafty Controller | Version 4.7.0 |