CVE-2026-7519

Fujian Apex LiveBOS Endpoint UploadImage.do path traversal

CVSS 6.9 MEDIUMEPSS 0.4%CWE-22

A vulnerability has been found in Fujian Apex LiveBOS up to 2.0. Impacted is an unknown function of the file /feed/UploadImage.do of the component Endpoint. Such manipulation of the argument filename leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.1 is recommended to address this issue. Upgrading the affected component is advised.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

Fujian Apex · LiveBOS

public PoCs found — 1

cve_referencemy.feishu.cn/docx/TCyMdptvaoTQCvxkHLbceJZCnge?from=from_copylinkunverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://my.feishu.cn/docx/TCyMdptvaoTQCvxkHLbceJZCnge?from=from_copylink https://vuldb.com/submit/804096 https://vuldb.com/vuln/360333 https://vuldb.com/vuln/360333/cti