CVE-2026-7519 PUBLISHED

Fujian Apex LiveBOS Endpoint UploadImage.do path traversal

Assigner: VulDB
Reserved: 30.04.2026 Published: 01.05.2026 Updated: 01.05.2026

A vulnerability has been found in Fujian Apex LiveBOS up to 2.0. Impacted is an unknown function of the file /feed/UploadImage.do of the component Endpoint. Such manipulation of the argument filename leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.1 is recommended to address this issue. Upgrading the affected component is advised.

Metrics

CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
CVSS Score: 6.9

Product Status

Vendor Fujian Apex
Product LiveBOS
Versions
  • Version 2.0 is affected
  • Version 2.1 is unaffected

Credits

  • 0menc (VulDB User) reporter

References

Problem Types

  • Path Traversal CWE