Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0. The affected element is the function Upload of the file FileTool.java of the component File Upload Endpoint. The manipulation of the argument Type results in path traversal. The attack may be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-6620 A vulnerability was found in SonicCloudOrg sonic-server up to 2.0.0. The affected element is the function Upload of the file http://FileTool.java of the component File Upload … https://www.cve.org/CVERecord?id=CVE-2026-6620
Post summary
The snippet announces CVE-2026-6620, identifies the affected function and file, but provides no further exploitation, patch, or PoC details.
CVE-2026-6620 Path Traversal in SonicCloudOrg Sonic-Server Up to 2.0.0 File Upload https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6620
Post summary
A path‑traversal vulnerability (CVE‑2026‑6620) in Sonic‑Server was disclosed, providing minimal technical details but no evidence of exploitation, patches, or mitigations.