Craftycontrol
- 1
- vulnerability tracked
- 1
- critical
- 11 August 2026
- latest publication
cve
Vulnerability watch
idvulnerabilityseveritypublished
CVE-2026-13716Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Controller application and perform remote code execution.Craftycontrol Crafty Controller Critical CVSS 9.1