Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array parameters that allows unauthenticated attackers to delete arbitrary files by supplying ../ sequences that bypass directory boundary validation. Attackers can exploit the optional and disabled-by-default authentication control to traverse outside the intended application directory and delete critical files such as server.js or package.json, causing complete denial of service.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-18 | 2 | Disclosure1Patch1 |
| 2026-05-20 | 2 | Disclosure2 |
CVE-2026-45230 DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array parameters that allows unauthenticated… https://www.cve.org/CVERecord?id=CVE-2026-45230
Post summary
DumbAssets through 1.0.11 contains a path traversal flaw in the POST /api/delete-file endpoint, enabling unauthenticated deletions.
🚨 CVE-2026-45230 — CVSS 9.1/10 █████████░ DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and... Severity: CRITICAL Patch now. #cybersecurity #CVE https://t.co/xF3OATbUmI
Post summary
CVE‑2026‑45230 is a critical path traversal in DumbAssets, mitigated by an available patch.
🚨*CVE* CVE-2026-45230 DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array parameters that allows unauthenticated… https://www.cve.org/CVERecord?id=CVE-2026-45230 ----- Traducción: CVE-2026-45230 Dum… http://infoflow.cloud`
Post summary
The tweet announces the disclosure of CVE-2026-45230, a path traversal flaw in DumbAssets 1.0.11 that permits unauthenticated file deletion through the POST /api/delete-file endpoint.
CVE-2026-45230 Path Traversal in DumbAssets 1.0.11 Allows Unauthenticate... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45230 Don't wait vulnerability scanning results: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=2
Post summary
The post announces a path‑traversal flaw (CVE‑2026‑45230) in DumbAssets 1.0.11, linking to a details page, but does not provide a PoC, exploit code, or patch information.