CVE-2026-25785
CRITICALLanscope Endpoint Manager <9.4.7.3 - Path Traversal
Title source: llmDescription
Path traversal vulnerability exists in Lanscope Endpoint Manager (On-Premises) Sub-Manager Server Ver.9.4.7.3 and earlier, which may allow an attacker to tamper with arbitrary files and execute arbitrary code on the affected system.
References (2)
Core 2
Core References
Various Sources
https://jvn.jp/en/jp/JVN79096585/
Various Sources
https://www.motex.co.jp/news/notice/2026/release260225/
Scores
CVSS v3
9.8
EPSS
0.0057
EPSS Percentile
42.4%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
total
Details
CWE
CWE-22
Status
published
Products (1)
motex/lanscope_endpoint_manager
< 9.4.8.0
Published
Feb 25, 2026
Tracked Since
Feb 25, 2026