Vulnerability ID: CVE-2026-25069 Product: SunFounder Pironman Dashboard Affected Versions: <= 1.3.13 Vulnerability Type: Path Traversal (Arbitrary File Read/Deletion) CVSS Score: 9.3 Exploit Details: - Read Command: - Delete Command: Root Cause: The 'filename' parameter is not sanitized, allowing path traversal. Impact: - Reading arbitrary files, including sensitive system files. - Deleting arbitrary files, leading to potential compromise or denial of service. Reference Links: - CVE Record: https://www.cve.org/CVERecord?id=CVE-2026-25069 - Software Link: https://github.com/sunfounder/pm_dashboard/ Additional Context: - SunFounder is an educational technology company offering STEAM education products. - Pironman Dashboard provides a REST API and web interface for managing the Raspberry Pi-based Pironman cases.