TI-2018-15618 CVE-2018-25393 · GHSA-rj56-vp9h-3frjNavigate CMS 2.8.5 Path Traversal via navigate_download.phpPriority MEDIUM 64Navigate CMS 2.8.5 contains a path traversal vulnerability that allows authenticated users to download arbitrary files by injecting directory traversal sequences in the id parameter.CVSS 4.0HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00565 · Published 2026-05-29 · No fix listed CWE-22