Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-115194

Quick assessment

Affected
CVE-2026-115194
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Mautic 的资产（Asset）API 中存在路径遍历漏洞。当通过 API 创建本地资产时，系统未将传入的文件路径限制在资产上传目录内。任何拥有创建资产权限的已认证 API 用户，均可将 Web 服务器进程可读的任意文件注册为 Mautic 资产。一旦该资产被发布，其公开下载 URL 将无需身份验证即可返回该文件的内容。这使得攻击者能够读取服务器上的任意文件，包括包含数据库密码、密钥以及邮件（SMTP）凭证的 Mautic 配置文件，以及系统文件和其他任何 Web 服务器用户可读的文件。泄露的凭证可被用于访问数据

CVSS 6.5 · Medium

I. Basic Information for CVE-2026-115194

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset through the API, the supplied file path is not restricted to the asset upload directory. An authenticated API user with permission to create assets can register any file that is readable by the web server process as a Mautic asset. When the asset is published, its public download URL serves the contents of that file without authentication. This allows the attacker to read arbitrary files from the server, including Mautic configuration files containing the database password, secret key, and mail (SMTP) credentials, as well as system files and any other file readable by the web server user. Exposed credentials can be used to access the database or other connected services, and anyone with the public asset URL can retrieve the file contents.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- - 2.3.0 ~ 5.2.12 -

II. Public POCs for CVE-2026-115194

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-115194

请登录查看更多情报信息。

Other References for CVE-2026-115194 (1)

IV. Related Vulnerabilities

Same weakness: CWE-22