Live › vulnerability › CVE-2026-108140
Go to dashboardAn authenticated user with the Restore Operator role who also controls the contents of a backed-up NAS share can use relative path traversal to write attacker-controlled files to an arbitrary path on the backup server. The sources do not name the product, so the exact impact beyond arbitrary file write is unknown.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-27 17:32 UTC. All times on this page are UTC.
Teams running the backup server that restores data from NAS shares where a Restore Operator role exists and the share contents can be controlled by a user. The sources do not name the vendor or affected versions, so exposure cannot be confirmed from this text. Teams without a Restore Operator role or without NAS-sourced backups are unlikely to be exposed.
No product ranges from the sources yet.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal.
This page as .md · .json · in your agent: get_signal("CVE-2026-108140")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.