CVE-2026-46747

CVSS Score & Metrics

Base Score

4.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N                                    

Vulnerability Description

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application does not properly sanitize path input in the `GET /api/sftp/uploadFiles` endpoint used for directory listing. This allows path traversal through crafted input, enabling access to unintended file system locations.

Vulnerability Details

Published Date

June 09, 2026

Last Modified

June 12, 2026

CWE ID

CWE-26

Source

NVD

Vendor

Siemens

Product

SINEC INS

External References

https://cert-portal.siemens.com/productcert/html/ssa-860189.html

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment