CVE-2026-30278

CRITICAL

FLY is FUN Aviation Navigation 35.33 - Arbitrary File Overwrite

Title source: llm

Description

An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

References (3)

Core 3

Core References

http://fly.com

https://secsys.fudan.edu.cn/

http://www.funair.cz/forum

Scores

CVSS v3 9.8

EPSS 0.0058

EPSS Percentile 43.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact total

Details

CWE

CWE-22

Status published

Products (1)

funair/fly_is_fun 35.33

Published Mar 31, 2026

Tracked Since Mar 31, 2026