Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-19758 Path Traversal in dromara lamp-cloud 5.10.0 via FileChunkController https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-19758
Post summary
The text announces a path traversal vulnerability (CVE‑2026‑19758) in dromara lamp‑cloud 5.10.0 via the FileChunkController, providing technical details but no PoC, exploit code, patch, or evidence of active exploitation.