VulnSocial

CVE-2026-8209Disclosure

LOWCVSS 6.9 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed .zip extraction results in deletion of the file and a DOS condition. Successful exploitation requires Teacher or higher privileges. Exploitation could result in loss of availability of the web application.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-23

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 4 signals
  • Disclosure: 4 classified signals
  • Peaked 1d ago at 3 mentions (2026-05-09); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-05-09: 3Mentions · 2026-05-11: 1Technical Details · 2026-05-09: 3Technical Details · 2026-05-11: 105-0905-11
Signal classification1 categories
Disclosure
4100.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-05-093
Disclosure3
2026-05-111
Disclosure1
Full discourse4 posts
  • White Rabbitx 🏴‍☠️@TheRabbitPy
    Disclosure

    🧨 Path traversal in Gibbon (< v30.0.01) can trigger DoS via failed ZIP extraction that deletes application files. Requires Teacher+ privileges. #CVE #CyberSecurity #Infosec https://nvd.nist.gov/vuln/detail/CVE-2026-8209

    Post summary

    A path traversal flaw in Gibbon versions below v30.0.01 allows administrators with Teacher+ privileges to cause a DoS by deleting application files during ZIP extraction.

    1003054
    1.8K followersView on X
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-8209 📊 Severity: 6.9 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-8209 #CVE-2026-8209 #CVE #Medium #CyberSecurity #InfoSec https://t.co/aYOkUUrfv7

    Post summary

    The message announces CVE-2026-8209 as a medium severity vulnerability affecting unspecified products, linking to its NVD entry for further details.

    0000032
    157 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-8209 Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed .zip extra… https://www.cve.org/CVERecord?id=CVE-2026-8209

    Post summary

    The post describes a path traversal vulnerability in Gibbon that can cause denial-of-service, but does not mention a PoC, exploit, active exploitation, or patch.

    0000068
    57.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-8209 Path Traversal Denial of Service in Gibbon Versions Before 30.0.01 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8209 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3

    Post summary

    A Path Traversal Denial of Service vulnerability (CVE‑2026‑8209) affecting Gibbon versions before 30.0.01 has been disclosed with technical details, but no PoC, exploit, or patch information is included.

    0000043
    4.0K followersView on X

Explore more

Back to dashboard