crivion vulnerabilities

Products

• Laranode 1

Latest crivion CVEs

Newest publication first

1. CVE-2026-100520 Laranode before 1.2.1 Path Traversal in File Manager Upload Endpoint

   Published 2026-09-26

   High·CVSS 8.7 EPSS 1.1%

   Laranode versions before 1.2.1 contain a path traversal vulnerability in the POST /filemanager/upload-file endpoint that allows authenticated users to write arbitrary files outside their home directory. Attackers can supply directory traversal sequences in the path parameter to w...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.