WaveStore vulnerabilities
We track 1 vulnerability in WaveStore products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on December 16, 2025.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest WaveStore vulnerabilities
- 7.2 High severity
WaveStore Server: Improper Limitation of a Pathname to a Restricted Directory
WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-privileges is able to execute arbitrary OS commands on the server using path traversal in the showerr sc