Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-01-30 | 5 | Disclosure5 |
| 2026-01-31 | 1 | Patch1 |
A path traversal vulnerability (CVE-2026-0963) affects Crafty Controller Crafty-4. This could lead to unauthorized file access. Review patch details. #infosec #pathtraversal #CraftyController https://www.pulsepatch.io/posts/cve-2026-0963-crafty-controller-crafty-4-path-traversal
Post summary
A path traversal issue (CVE‑2026‑0963) in Crafty Controller Crafty‑4 could enable unauthorized file access; a patch is available to mitigate it.
CVE-2026-0963 Crafty Controller File Operations API Endpoint Path Traversal Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-0963
Post summary
The message announces CVE-2026-0963, a path traversal flaw affecting the Crafty Controller File Operations API.
[CVE-2026-0963: CRITICAL] Crafty Controller's File Operations API Endpoint component has an input neutralization vulnerability, enabling attackers to conduct file tampering and remote code execution. #cybersec...#cve,CVE-2026-0963,#cybersecurity https://cvefind.com/CVE-2026-0963
Post summary
The tweet announces a critical vulnerability in Crafty Controller’s File Operations API, highlighting an input neutralization flaw that enables file tampering and remote code execution, but it does not provide PoC, exploit code, or remediation details.
🔴 CVE-2026-0963 - Critical An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code e... https://www.thehackerwire.com/vulnerability/CVE-2026-0963/ https://t.co/ZNnG84LT25
Post summary
CVE-2026-0963 is a critical input‑neutralization vulnerability in Crafty Controller’s File Operations API that permits authenticated remote attackers to tamper with files and run arbitrary code. No PoC, exploit, or patch is mentioned in the text.
CVE-2026-0963 An input neutralization vulnerability in the File Operations API Endpoint component of Crafty Controller allows a remote, authenticated attacker to perform file tamperi… https://www.cve.org/CVERecord?id=CVE-2026-0963
Post summary
The post briefly reports a newly disclosed input neutralization flaw in Crafty Controller’s File Operations API that could allow authenticated users to tamper with files.
🚨 CVE-2026-0963: Improper Limitation of a Pathname... Authenticated path traversal in Crafty Controller's File Ops API enables trivial file manipulation and RCE - perfect for... https://zerodaysignal.com/vulnerability/CVE-2026-0963 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The message announces CVE-2026-0963, describing an authenticated path traversal flaw in Crafty Controller’s File Ops API that allows file manipulation and remote code execution, with further details likely available at the linked page.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | craftycontrol | crafty_controller | 4.7.0 | - | - |