CVSS
4.3
CVSS v3.1
EPSS
N/A
Exploit Prediction Score
Published
August 14, 2026
Exploitability
No EPSS data available
A security flaw has been discovered in 648540858 wvp-GB28181-pro 2.7.4-20260107. This vulnerability affects unknown code of the file LogController.java of the component Log File Download Endpoint. The manipulation of the argument fileName results in path traversal. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
No package data available.
Publisher and database URLs for this record (shown for attribution; reading stays in Bugflare).