{"id":"CVE-2026-101024","published":"2026-10-08T21:17:51.240","lastModified":"2026-10-09T14:17:10.363","description":"Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitation could result in unauthorized file creation or modification and, under certain conditions, arbitrary code execution.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-23"],"vendors":[],"products":[],"references":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-03.json","tags":[]},{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-03","tags":[]}],"exploitRefs":[{"url":"https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-03.json","tags":[]}],"hasPoc":true,"ai":{"summary":"This vulnerability allows an authenticated user with Viewer privileges to traverse relative paths and write attacker-controlled content to the file system, potentially leading to unauthorized file creation or modification and, under certain conditions, arbitrary code execution.","exploitability":"Exploitation is moderately hard as it requires an authenticated user with specific privileges. Precondition is the presence of a user with Viewer access.","blast_radius":"If exploited, this could result in unauthorized file manipulation and, under certain conditions, arbitrary code execution, impacting system integrity and confidentiality.","remediation":"Upgrade to v2.1.7 or later.","detection":"No reliable host or network indicator is derivable from the published description.","tags":["rce","auth-bypass","web"],"model":"qwen2.5:7b-instruct","analyzedAt":"2026-10-09T08:43:57.968Z"}}