CVE-2026-2493Disclosure

LOWCVSS 7.5 · HIGH

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Prioritize remediation for affected systems immediately
Assume compromise if assets are exposed
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

IceWarp collaboration Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of IceWarp. Authentication is not required to exploit this vulnerability. The specific flaw exists within handling of the ticket parameter provided to the collaboration endpoint. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose information in the context of root. Was ZDI-CAN-25440.

Back to dashboard

3.5/ 10 priority

Sources & remediation

Other references

https://www.zerodayinitiative.com/advisories/ZDI-26-130/

Weakness type (CWE)

CWE-22

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

Active exploitation appears in 1 classified signals
3 mentions across 3 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
Peaked 2d ago at 1 mentions (2026-02-28); latest day: 1
3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Disclosure

266.7%

Active Exploitation

133.3%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-02-28	1	Active Exploitation1
2026-03-03	1	Disclosure1
2026-03-13	1	Disclosure1

Full discourse3 posts

Anonymous Tech@Anonymous_Tech7224d
Active Exploitation
**IceWarp Servers** are under attack via a directory traversal vulnerability, exploited without authentication. A CVSS 7.5 rated vulnerability, assigned CVE-2026-2493, allows remote attackers to disclose sensitive information, potentially attributed to FANCY BEAR.
Post summary
IceWarp servers are being actively exploited via a directory traversal vulnerability (CVE-2026-2493) that allows remote disclosure of sensitive data; no patch or PoC is mentioned.
0001094
1 followersView on X
CVE@CVEnew211d
Disclosure
CVE-2026-2493 IceWarp collaboration Directory Traversal Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected… https://www.cve.org/CVERecord?id=CVE-2026-2493
Post summary
The post announces CVE-2026-2493, a Directory Traversal vulnerability in IceWarp that allows remote information disclosure, with no PoC, exploitation, or patch details provided.
00000142
56.7K followersView on X
SystemTek - Technology news website@SystemTek_UK221d
Disclosure
IceWarp collaboration Directory Traversal Information Disclosure Vulnerability (CVE-2026-2493) #CVE20262493 #CyberSecurity #IceWarp #InformationDisclosureVulnerability https://www.systemtek.co.uk/?p=48597 https://t.co/gu0VxswL34
Post summary
The tweet announces CVE-2026-2493, a directory traversal information disclosure flaw in IceWarp Collaboration, without providing any PoC, exploit, or mitigation details.
0000063
1.8K followersView on X

Explore more

Back to dashboard