VulnSocial

CVE-2026-11429Disclosure

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Two endpoints in the Vault Service ScriptsController, shared by Altium Enterprise Server and Altium 365, accept file uploads where a user-supplied filename component is used to construct the destination path without validation, allowing arbitrary files to be written to any location writable by the service account. Because the file write operation completes before authentication is validated, the vulnerability can be exploited without any credentials, session, or prior knowledge of the system. An unauthenticated network attacker can use this primitive to place executable content in directories where it is later executed by the service, resulting in remote code execution under the Vault Service account. Altium Enterprise Server is fixed in 8.1.1; the issue has been remediated in Altium 365 (commercial and government cloud) at the service level.

Back to dashboard
0.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-22CWE-306

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 4 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 4 signals
  • Disclosure: 3 classified signals
  • General: 1 classified signal
  • Peaked 3d ago at 1 mentions (2026-06-05); latest day: 1
  • 4 total mentions across 4 days

Deep dive

Activity timeline4 mentions / 4d
00111Mentions · 2026-06-05: 1Mentions · 2026-06-06: 1Mentions · 2026-06-08: 1Mentions · 2026-06-10: 1Patch / Workaround · 2026-06-06: 1Patch / Workaround · 2026-06-10: 1Technical Details · 2026-06-05: 1Technical Details · 2026-06-06: 1Technical Details · 2026-06-08: 1Technical Details · 2026-06-10: 106-0506-0606-0806-10
Signal classification2 categories
Disclosure
375.0%
General
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-06-051
General1
2026-06-061
Disclosure1
2026-06-081
Disclosure1
2026-06-101
Disclosure1
Full discourse4 posts
  • Cyber Threat Observatory | Alan Turing Institute@TuringCyberObs
    Disclosure

    CVE-2026-11429 (Altium ES / Altium 365) is a critical path traversal flaw in the shared Git Service. Authenticated users may potentially enable RCE or project-data exposure. See full analysis: https://github.com/alan-turing-institute/cyber-threat-observatory/blob/main/reports/2026-06-06/TIER_2_CVE-2026-11429.md #CyberSecurity #DPI #SupplyChainSecurity #DevSecOps

    Post summary

    The announcement identifies CVE-2026-11429 as a critical path traversal flaw in Altium ES / Altium 365, highlighting potential RCE or data exposure for authenticated users, with a link to a detailed analysis.

    0002098
    58 followersView on X
  • Upwind Security MDR@UpwindMDR
    Disclosure

    🚨 Critical - Multiple Vulnerabilities Disclosed in Altium Enterprise Server (CVE-2026-11429, CVE-2026-11423, CVE-2026-11419, CVE-2026-11420, CVE-2026-11414) A cascade of severe flaws has been disclosed affecting Altium Enterprise Server, including unauthenticated path traversal and hard-coded cryptographic keys. Attackers can exploit these vulnerabilities to read/write arbitrary files, bypass authentication, and achieve full Remote Code Execution (RCE). 👉 Pre-auth RCE & data exposure risks | Altium 365 cloud deployments are largely mitigated or remediated, but self-managed Altium Enterprise Server instances must patch immediately.

    Post summary

    Several newly disclosed CVEs in Altium Enterprise Server allow unauthenticated attackers to read/write arbitrary files, bypass authentication, and achieve full remote code execution, necessitating urgent patching of self‑managed instances.

    00010108
    207 followersView on X
  • SecAlerts@SecAlertsCo
    Disclosure

    CVE-2026-11429: Unauthenticated RCE in Altium Enterprise Server and Altium 365. Path traversal in ScriptsController lets attackers upload files to arbitrary paths - no login needed. CVSS 10. Patch now. https://secalerts.co/vulnerability/CVE-2026-11429

    Post summary

    The post discloses CVE-2026-11429, an unauthenticated remote‑code‑execution flaw in Altium Enterprise Server and Altium 365 via a path‑traversal vulnerability in ScriptsController that allows arbitrary file uploads, and urges prompt patching.

    0000051
    832 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-11429 Path Traversal and Remote Code Execution in Altium Enterprise Server Git Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11429

    Post summary

    The text announces the CVE and provides its type (path traversal + RCE) but lacks detailed technical, exploit, or patch information.

    0000051
    4.0K followersView on X

Explore more

Back to dashboard