CVE-2026-11420Disclosure(altium / on-prem_enterprise_server)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch altium on-prem_enterprise_server systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise Server allow an unauthenticated network attacker to write arbitrary files to any writable location on the server filesystem and to read package archive files from the server. No authentication, session, or credentials are required. Because content-controlled files can be written to web-accessible directories, or used to overwrite application binaries or configuration files, exploitation can be escalated to remote code execution in the context of the service account, and can disclose deployment package contents. Altium 365 cloud deployments are not affected, as the Network Installation Service is not part of the cloud offering.

altium CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://www.altium.com/platform/security-compliance/security-advisories

Weakness type (CWE)

CWE-22CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

on-prem_enterprise_server

Threat summary

Patch or workaround signal is available
6 mentions across 4 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 6 signals
Disclosure: 3 classified signals
General: 1 classified signal
Peaked 2d ago at 3 mentions (2026-06-06); latest day: 1
6 total mentions across 4 days

Affected systems

Vendors

altium

Products

on-prem_enterprise_server

Deep dive

Activity timeline6 mentions / 4d

Signal classification3 categories

Disclosure

350.0%

Patch

233.3%

General

116.7%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-05	1	Disclosure1
2026-06-06	3	Disclosure1General1Patch1
2026-06-12	1	Disclosure1
2026-07-30	1	Patch1

Full discourse6 posts

Kaitan ID Security@KaitanSecurity130d
Disclosure
🛡️ Altium Enterprise Server: A Double Hit Engineering and PCB design teams relying on Altium Enterprise Server face two critical vulnerabilities: CVE-2026-11420 (CVSS 10.0) exposes path traversal flaws in the Network…
Post summary
The text announces a critical path traversal vulnerability in Altium Enterprise Server (CVE-2026-11420) with CVSS 10.0; no PoC, exploit details, active exploitation, or patch information are provided.
1000023
81 followersView on X
Upwind Security MDR@UpwindMDR136d
Patch
🚨 Critical - Multiple Vulnerabilities Disclosed in Altium Enterprise Server (CVE-2026-11429, CVE-2026-11423, CVE-2026-11419, CVE-2026-11420, CVE-2026-11414) A cascade of severe flaws has been disclosed affecting Altium Enterprise Server, including unauthenticated path traversal and hard-coded cryptographic keys. Attackers can exploit these vulnerabilities to read/write arbitrary files, bypass authentication, and achieve full Remote Code Execution (RCE). 👉 Pre-auth RCE & data exposure risks | Altium 365 cloud deployments are largely mitigated or remediated, but self-managed Altium Enterprise Server instances must patch immediately.
Post summary
The tweet reports several newly disclosed CVEs impacting Altium Enterprise Server, detailing severe RCE and path‑traversal flaws, and stresses that affected installations must apply patches immediately.
00010108
207 followersView on X
DFIR Lab@DFIR_Lab82d
Patch
🚨 CRITICAL: CVE-2026-11420 (CVSS 9.8) - Path traversal in Altium Enterprise Server NIS allows unauthenticated RCE. No credentials required. Patch immediately if running on-prem deployments. #CVE #PatchNow #ThreatIntel https://t.co/fEbOFhm5xV
Post summary
The tweet warns of a critical CVE-2026-11420 that permits unauthenticated remote code execution via path traversal, emphasizing the need for an immediate patch on on‑prem deployments.
0000065
98 followersView on X
CVE@CVEnew136d
Disclosure
CVE-2026-11420 Two path traversal vulnerabilities in the Network Installation Service (NIS) of Altium Enterprise Server allow an unauthenticated network attacker to write arbitrary … https://www.cve.org/CVERecord?id=CVE-2026-11420
Post summary
The entry announces CVE‑2026‑11420, describing two path‑traversal flaws in Altium Enterprise Server’s NIS that enable an unauthenticated attacker to write arbitrary files over the network.
00000139
57.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds136d
General
CVE-2026-11420 Path Traversal Vulnerabilities in Altium Enterprise Server Network Insta... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11420 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The text notes the discovery of a path traversal vulnerability (CVE-2026-11420) in Altium Enterprise Server and provides links to a vulnerability database and notification.
0000050
4.0K followersView on X
SecAlerts@SecAlertsCo137d
Disclosure
CVE-2026-11420: Critical (CVSS 10) path traversal in Altium Enterprise Server's NIS. No auth needed to read or write arbitrary files on the host. If you're running Altium Enterprise Server, check your exposure now. https://secalerts.co/vulnerability/CVE-2026-11420 https://t.co/On4TCIlgiR
Post summary
The tweet announces CVE‑2026‑11420, a critical unauthenticated path‑traversal vulnerability in Altium Enterprise Server, urging users to assess their exposure immediately.
0000066
830 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	altium	on-prem_enterprise_server	-	-	-

Explore more

Back to dashboard altium CVEs on-prem_enterprise_server vulnerabilities

What researchers are saying

CVE-2026-11420

Kaitan ID Security[verified]@KaitanSecurityDisclosure

The text announces a critical path traversal vulnerability in Altium Enterprise Server (CVE-2026-11420) with CVSS 10.0; no PoC, exploit details, active exploitation, or patch information are provided.

Upwind Security MDR[verified]@UpwindMDRPatch

The tweet reports several newly disclosed CVEs impacting Altium Enterprise Server, detailing severe RCE and path‑traversal flaws, and stresses that affected installations must apply patches immediately.

DFIR Lab[verified]@DFIR_LabPatch

The tweet warns of a critical CVE-2026-11420 that permits unauthenticated remote code execution via path traversal, emphasizing the need for an immediate patch on on‑prem deployments.

CVE@CVEnewDisclosure

The entry announces CVE‑2026‑11420, describing two path‑traversal flaws in Altium Enterprise Server’s NIS that enable an unauthenticated attacker to write arbitrary files over the network.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The text notes the discovery of a path traversal vulnerability (CVE-2026-11420) in Altium Enterprise Server and provides links to a vulnerability database and notification.

SecAlerts@SecAlertsCoDisclosure

The tweet announces CVE‑2026‑11420, a critical unauthenticated path‑traversal vulnerability in Altium Enterprise Server, urging users to assess their exposure immediately.