CyberSecBulletin

Axel Download Accelerator vulnerabilities

We track 1 vulnerability in Axel Download Accelerator products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.

1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score

Latest Axel Download Accelerator vulnerabilities

  • 8.1 High severity

    Axel: Path Traversal: '../filedir'

    CVE-2026-118485Axel Download Accelerator

    Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (http_decode()) on the output filename after the URL has been parsed and the filename component extracted. This allows an attacker to embed %2e%2e%2f (URL-encoded ../) sequences in the