CVE-2026-0805

An input neutralization vulnerability in the Backup Configuration component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.

Score

CVSS 3.1 8.8 High

Status

Analyzed - cve@gitlab.com

Published

2026-01-30

Last modified

2026-02-02

Weaknesses

CWE-22

Affected products

• Crafty Controller (Arcadia Technology Llc)
• Crafty Controller (Craftycontrol)

References

• https://gitlab.com/crafty-controller/crafty-4/-/issues/650