Vulnerability · Published Oct 8, 2026 · Assigned by icscert
CVE-2026-105275Satel Netco Design Relative Path Traversal
Medium 4.3
In plain English
A medium-severity security flaw in Satel Netco Design from Satel. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 18% of all known vulnerabilities).
Severity (CVSS 3.1)4.3Medium
Exploit odds (30 days)0.3%top 81.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import functionality. An authenticated user with Viewer privileges could access file paths outside the intended directory and use observable application responses to determine whether files exist on the host system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Satel | Satel Netco Design | 0 – before v2.1.7 |
Weakness: CWE-23 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N