Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this vulnerability is the function Download of the file /Search/Subject/downLoad. Performing a manipulation of the argument path results in path traversal. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-2672 Path Traversal in Tsinghua Unigroup Electronic Archives System 3.2.210802 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-2672
Post summary
The text announces CVE-2026-2672 as a path traversal vulnerability in Tsinghua Unigroup Electronic Archives System 3.2.210802, without any evidence of PoC, exploit code, or active exploitation.
CVE-2026-2672 A security flaw has been discovered in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this vulnerability is the function Download of the fi… https://www.cve.org/CVERecord?id=CVE-2026-2672
Post summary
A new CVE (CVE-2026-2672) affecting Tsinghua Unigroup Electronic Archives System 3.2.210802 has been disclosed, but no further details on exploitation, patches, or technical specifics are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | unigroup | electronic_archives_system | - | - | - |