Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in kerwincui FastBee up to 1.2.1. The affected element is the function ToolController.download of the file springboot/fastbee-open-api/src/main/java/com/fastbee/data/controller/ToolController.java of the component Tool Download Endpoint. The manipulation of the argument fileName results in path traversal. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-7676 Path Traversal in kerwincui FastBee Up to 1.2.1 Tool Download Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7676
Post summary
The post announces CVE-2026-7676 as a path traversal vulnerability affecting the KerwinCUI FastBee tool download endpoint, with the details provided on the Vulmon site.