Read the docs
TI-2026-69110 Aliases CVE-2026-92533GHSA-4gg8-j6f5-xp7v

Path traversal in BugTracker.NET lets attackers read system files

Priority LOW 31CWE-24Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · None · None
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA.

Summary

All versions of BugTracker.NET are affected by a path traversal flaw in its file download component. The parameter that specifies the file name does not properly validate user-supplied paths (CWE-24). An authenticated remote attacker with low privileges can read files outside the intended directory, including system files accessible to the application's account.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

Path traversal vulnerability in the BugTracker.NET file download component. The parameter used to specify the file name does not properly validate user-supplied paths. An authenticated remote attacker could enter a manipulated path to access files located outside the intended directory. Successful exploitation could allow the attacker to read system files accessible to the account used by the application.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00363 30th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BugTracker.NETBugTracker.NETall versions—No fix listedCNA
  • BugTracker.NET VendorBugTracker.NET Affected all versions Fixed in — No fix listed CNA

Remediation

The sources list no fixed version for BugTracker.NET.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Timeline

  1. 2026-10-07 Threatist record created from CVE-2026-92533
  2. 2026-10-07 Alias added: GHSA-4gg8-j6f5-xp7v
  3. 2026-10-07 CISA SSVC decision points changed
  4. 2026-10-07 Priority changed: MEDIUM → LOW

References

Other 1

  • TI-2026-69108 OS command injection in BugTracker.NET SVN integration CVSS 4.0HIGH 7.5
  • TI-2026-69109 Unrestricted file upload in BugTracker.NET attachments CVSS 4.0HIGH 7.5
  • TI-2008-00310 Cross-site scripting (XSS) vulnerability in BugTracker.NET before 2.7.2 allows remote… CVSS 2.0MEDIUM 4.3
  • TI-2008-00311 Multiple cross-site request forgery (CSRF) vulnerabilities in BugTracker.NET before 2.7.2… CVSS 2.0MEDIUM 4.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences