CyberSecBulletin

Coderaiser vulnerabilities

We track 2 vulnerabilities in Coderaiser products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Coderaiser vulnerabilities

  • 7.5 High severity

    cloudcmd: Relative Path Traversal

    CVE-2026-110690Coderaiser

    Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where the onGET handler at server/rest/index.js:130 calls the unguarded root() function instead of the root.resolve() validatio

  • 9.8 Critical severity

    cloudcmd: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-82460Coderaiser

    Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside