Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Roadiz is a polymorphic content management system based on a node system that can handle many types of services. A vulnerability in roadiz/documents prior to versions 2.7.9, 2.6.28, 2.5.44, and 2.3.42 allows an authenticated attacker to read any file on the server's local file system that the web server process has access to, including highly sensitive environment variables, database credentials, and internal configuration files. Versions 2.7.9, 2.6.28, 2.5.44, and 2.3.42 contain a patch.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-33486 Roadiz is a polymorphic content management system based on a node system that can handle many types of services. A vulnerability in roadiz/documents prior to versions… https://www.cve.org/CVERecord?id=CVE-2026-33486
Post summary
A brief notification that CVE-2026-33486 affects the Roadiz document system, accompanied by a link to the CVE record, with no additional technical, exploit, or patch details provided.
🚨*CVE* CVE-2026-33486 Roadiz is a polymorphic content management system based on a node system that can handle many types of services. A vulnerability in roadiz/documents prior to versions… https://www.cve.org/CVERecord?id=CVE-2026-33486 ----- Traducción: CVE-2026-33486 Roa… http://infoflow.cloud`
Post summary
The post provides a brief mention of CVE-2026-33486 with a link to its CVE record, but includes no detailed technical info, PoC, exploit, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | roadiz | core-bundle-dev-app | - | - | - |