Vulnerability · Published Mar 28, 2026 · Assigned by VulDB

CVE-2026-4999z-9527 admin isImg Check upload.js uploadFile path traversal

Medium 6.3

In plain English

A medium-severity path traversal in admin from z-9527. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.4%top 70.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A security vulnerability has been detected in z-9527 admin up to 72aaf2dd05cf4ec2e98f390668b41e128eec5ad2. This issue affects the function uploadFile of the file /server/utils/upload.js of the component isImg Check. The manipulation of the argument fileType leads to path traversal. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The vendor was contacted early about this disclosure but did not respond in any way.

Affected products (as reported)

Vendor	Product	Versions
z-9527	admin	72aaf2dd05cf4ec2e98f390668b41e128eec5ad2

Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

References

VDB-353886 | z-9527 admin isImg Check upload.js uploadFile path traversal vdb-entry, technical-description
VDB-353886 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #778277 | z-9527 admin ≤ commit 72aaf2d Path Traversal: '../filedir' third-party-advisory
https://github.com/CC-T-454455/Vulnerabilities/tree/master/z9527-admin/vulnerability-9 exploit