CVE-2026-30278

An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2026-03-31

Last modified

2026-07-05

Weaknesses

CWE-22

Affected products

• Fly Is Fun (Funair)

References

• http://www.funair.cz/forum
• https://secsys.fudan.edu.cn/