Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ProjeQtor versions 7.0 through 12.4.3 contain a path traversal vulnerability in the log file viewer at dynamicDialog.php where the logname parameter is not validated against directory traversal sequences before constructing file paths. Authenticated attackers can inject directory traversal sequences ../ into the logname parameter to read arbitrary .log files accessible to the web server process on the filesystem.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-41465 ProjeQtor versions 7.0 through 12.4.3 contains a path traversal vulnerability in the log file viewer at dynamicDialog.php where the logname parameter is not validated… https://www.cve.org/CVERecord?id=CVE-2026-41465
Post summary
The post discloses a path traversal flaw in ProjeQtor's log file viewer due to an unvalidated logname parameter, highlighting affected versions 7.0 through 12.4.3 and linking to the CVE record.
CVE-2026-41465 Path Traversal in ProjeQtor 7.0 Through 12.4.3 Log File Viewer https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-41465
Post summary
The post announces a Path Traversal issue (CVE‑2026‑41465) affecting ProjeQtor Log File Viewer 7.0‑12.4.3, but it lacks details on exploitation, mitigation or proof‑of‑concept.