Vulnerability · Published Sep 28, 2026 · Assigned by CERT-PL
CVE-2026-73642Path Traversal in Dayforce ESS Excelity
Critical 9.2
In plain English
A critical-severity path traversal in ESS Excelity from Dayforce. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 37% of all known vulnerabilities).
Severity (CVSS 4.0)9.2Critical
Exploit odds (30 days)0.4%top 63.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Dayforce ESS Excelity is vulnerable to Path Traversal in file download functionality. An unauthenticated attacker can sent GET request with file path parameter set to any path including an absolute local file path. This issue was fixed in version V4.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dayforce | ESS Excelity | 0 – before V4 |
Weakness: CWE-22 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N
References
- https://cert.pl/en/posts/2026/09/CVE-2026-73640 third-party-advisory
- https://hcm.excelityglobal.com/ESS product