Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET request.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-30996 An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from t… https://www.cve.org/CVERecord?id=CVE-2026-30996
Post summary
The entry provides a brief disclosure of a directory traversal vulnerability in SAC-NFe v2.0.02, detailing the nature of the flaw but offering no evidence of exploitation, patches, or PoC.
⚠️ HIGH — CVE-2026-30996 An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a dire… CVSS 7.5 Full analysis → https://sec.kaitan.id/cves/CVE-2026-30996 #HP #CyberSecurity #InfoSec
Post summary
The post announces CVE‑2026‑30996, a file‑handling flaw in SAC‑NFe v2.0.02 that could allow attackers to execute malicious code, with a CVSS score of 7.5.