← Back to browse · API

CVE-2026-2731

Severity
CRITICAL
CVSS
10.0
EPSS
0.00535
Risk score
40.19
CISA KEV
No
PoC
No
Published
2026-02-19
Modified
2026-02-19
First seen
2026-08-07
Aliases
EUVD-2026-7971, GHSA-R435-HW3Q-C6G9
Products
DynamicWeb:DynamicWeb 9 8, DynamicWeb:DynamicWeb 9 9 <9.19.7, DynamicWeb:DynamicWeb 9 9.20.0 <9.20.3
Sources
euvd EUVD-2026-7971

Description

Path traversal and content injection in JobRunnerBackground.aspx in DynamicWeb 8 (all) and 9 (<9.19.7 and <9.20.3) allows unauthenticated attackers to execute code via simple web requests

References