CVE-2026-1186

EAP Legislator is vulnerable to Path Traversal in file extraction functionality. Attacker can prepare zipx archive (default file type used by the Legislator application) and choose arbitrary path outside the intended directory (e.x. system startup) where files will be extracted by the victim upon opening the file. This issue was fixed in version 2.25a.

CVSS

No CVSS.

References

Link	Resource
https://abcpro.pl/eap-legislator
https://cert.pl/posts/2026/02/CVE-2026-1186

Configurations

No configuration.

History

15 Apr 2026, 00:35

Type	Values Removed	Values Added
Summary		(es) EAP Legislator es vulnerable a salto de ruta en la funcionalidad de extracción de archivos. El atacante puede preparar un archivo zipx (tipo de archivo predeterminado utilizado por la aplicación Legislator) y elegir una ruta arbitraria fuera del directorio previsto (p. ej., inicio del sistema) donde los archivos serán extraídos por la víctima al abrir el archivo. Este problema fue solucionado en la versión 2.25a.

02 Feb 2026, 14:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-02-02 14:16

Updated : 2026-06-17 10:15

NVD link : CVE-2026-1186

Mitre link : CVE-2026-1186

CVE.ORG link : CVE-2026-1186

JSON object : View

Products Affected

No product.

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2026-1186", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-1186", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-02T17:32:25.764299Z"}}], "cvssMetricV40": [{"type": "Secondary", "source": "cvd@cert.pl", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.6, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:L/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "LOW", "vulnAvailabilityImpact": "LOW", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "cvd@cert.pl", "affectedData": [{"vendor": "ABC PRO SP. Z O.O.", "product": "EAP Legislator", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "2.25"}], "defaultStatus": "unaffected"}]}], "published": "2026-02-02T14:16:34.210", "references": [{"url": "https://abcpro.pl/eap-legislator", "source": "cvd@cert.pl"}, {"url": "https://cert.pl/posts/2026/02/CVE-2026-1186", "source": "cvd@cert.pl"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "cvd@cert.pl", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "EAP Legislator is vulnerable to Path Traversal in file extraction functionality. Attacker can prepare zipx archive (default file type used by the Legislator application) and choose arbitrary path outside the intended directory (e.x. system startup)\u00a0where files will be extracted by the victim upon opening the file.\nThis issue was fixed in version 2.25a."}, {"lang": "es", "value": "EAP Legislator es vulnerable a salto de ruta en la funcionalidad de extracci\u00f3n de archivos. El atacante puede preparar un archivo zipx (tipo de archivo predeterminado utilizado por la aplicaci\u00f3n Legislator) y elegir una ruta arbitraria fuera del directorio previsto (p. ej., inicio del sistema) donde los archivos ser\u00e1n extra\u00eddos por la v\u00edctima al abrir el archivo.\nEste problema fue solucionado en la versi\u00f3n 2.25a."}], "lastModified": "2026-06-17T10:15:17.550", "sourceIdentifier": "cvd@cert.pl"}