CVE-2026-35496
LOW2.7CVSS v3
—CVSS v2
0.07%
EPSS (exploit probability)
CWE-22CWE
Description
A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-level directories that should not be accessible.
CVSS v3 vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Affected routers (0)
No routers currently mapped to this CVE in our database.