CVE-2024-40646

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-40646
Vertex is a management tool for PT (Private Tracker) users to manage streaming and watching videos. Versions prior to commit fbde301b97986d5913fc4bc95f5445750d282e11 are vulnerable to path traversal. Users should upgrade to a version containing commit fbde301b97986d5913fc4bc95f5445750d282e11 to receive a patch.

8.6 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 4.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://github.com/vertex-app/vertex/commit/fbde301b97986d5913fc4bc95f5445750d282e11 Patch
https://github.com/vertex-app/vertex/security/advisories/GHSA-92j5-qc36-23rr Vendor Advisory Exploit
Configurations

Configuration 1 (hide)

cpe:2.3:a:vertex-app:vertex:*:*:*:*:*:*:*:*
History

08 Jun 2026, 13:59

Type Values Removed Values Added
First Time Vertex-app
Vertex-app vertex
CPE cpe:2.3:a:vertex-app:vertex:*:*:*:*:*:*:*:*
References () https://github.com/vertex-app/vertex/commit/fbde301b97986d5913fc4bc95f5445750d282e11 - () https://github.com/vertex-app/vertex/commit/fbde301b97986d5913fc4bc95f5445750d282e11 - Patch
References () https://github.com/vertex-app/vertex/security/advisories/GHSA-92j5-qc36-23rr - () https://github.com/vertex-app/vertex/security/advisories/GHSA-92j5-qc36-23rr - Vendor Advisory, Exploit

01 Jun 2026, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-06-01 15:16

Updated : 2026-06-08 13:59

NVD link : CVE-2024-40646

Mitre link : CVE-2024-40646

CVE.ORG link : CVE-2024-40646

JSON object : View

Products Affected

vertex-app

  • vertex
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')