CVE-2026-104720

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in…

Risk score: 50/100
CVSS: 7.5 v3.1
Published: 5 Nov 2026

Open in the live forecast Today's forecast

What to know

What it is: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Kobikom Telecommunications and Informatics Services Inc. Kobikom allows Path Traversal. This issue affects Kobikom: before KobiPBX-FOP3-SEC-r1.
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Yellow

CVSS 7.5 high
Remotely exploitable without logging in

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1467

Original description

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Kobikom Telecommunications and Informatics Services Inc. Kobikom allows Path Traversal. This issue affects Kobikom: before KobiPBX-FOP3-SEC-r1.

Last activity 5 Nov 2026. Patch Forecast updates every hour.