CVE-2026-2251

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-2251", "assignerOrgId": "10b61619-3869-496c-8a1e-f291b0e71e3f", "state": "PUBLISHED", "assignerShortName": "Xerox", "dateReserved": "2026-02-09T14:29:07.126Z", "datePublished": "2026-02-27T08:08:52.263Z", "dateUpdated": "2026-03-03T15:36:53.126Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "platforms": ["Windows"], "product": "FreeFlow Core", "vendor": "Xerox", "versions": [{"lessThanOrEqual": "8.0.7", "status": "affected", "version": "0", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Improper limitation of a pathname to a restricted directory (<strong>Path Traversal</strong>) vulnerability in Xerox FreeFlow Core allows unauthorized path traversal leading to RCE. <br>This issue affects Xerox FreeFlow Core versions up to and including 8.0.7.<br><br>\n\n\n\n\n\nPlease consider upgrading to FreeFlow Core version 8.1.0 via the software available on - <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.support.xerox.com/en-us/product/core/downloads\">https://www.support.xerox.com/en-us/product/core/downloads</a>\n\n<a target=\"_blank\" rel=\"nofollow\" href=\"https://www.support.xerox.com/en-us/product/core/downloads?language=en\"></a>\n\n<br>"}], "value": "Improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Xerox FreeFlow Core allows unauthorized path traversal leading to RCE. \nThis issue affects Xerox FreeFlow Core versions up to and including 8.0.7.\n\n\n\n\n\n\n\nPlease consider upgrading to FreeFlow Core version 8.1.0 via the software available on - https://www.support.xerox.com/en-us/product/core/downloads \n\n https://www.support.xerox.com/en-us/product/core/downloads"}], "impacts": [{"capecId": "CAPEC-126", "descriptions": [{"lang": "en", "value": "CAPEC-126 Path Traversal"}]}, {"capecId": "CAPEC-253", "descriptions": [{"lang": "en", "value": "CAPEC-253 Remote Code Inclusion"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "10b61619-3869-496c-8a1e-f291b0e71e3f", "shortName": "Xerox", "dateUpdated": "2026-02-27T08:18:56.212Z"}, "references": [{"url": "https://securitydocs.business.xerox.com/wp-content/uploads/2026/02/Xerox-Security-Bulletin-026-005-for-Xerox-Freeflow-Core.pdf"}], "source": {"discovery": "UNKNOWN"}, "title": "Path Traversal leading to Remote Code Execution (RCE)", "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-28T04:55:30.258511Z", "id": "CVE-2026-2251", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-03T15:36:53.126Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-2251", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-28T04:55:30.258511Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-03T15:36:49.433Z"}}], "cna": {"title": "Path Traversal leading to Remote Code Execution (RCE)", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-126", "descriptions": [{"lang": "en", "value": "CAPEC-126 Path Traversal"}]}, {"capecId": "CAPEC-253", "descriptions": [{"lang": "en", "value": "CAPEC-253 Remote Code Inclusion"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Xerox", "product": "FreeFlow Core", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "8.0.7"}], "platforms": ["Windows"], "defaultStatus": "unaffected"}], "references": [{"url": "https://securitydocs.business.xerox.com/wp-content/uploads/2026/02/Xerox-Security-Bulletin-026-005-for-Xerox-Freeflow-Core.pdf"}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "Improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Xerox FreeFlow Core allows unauthorized path traversal leading to RCE. \nThis issue affects Xerox FreeFlow Core versions up to and including 8.0.7.\n\n\n\n\n\n\n\nPlease consider upgrading to FreeFlow Core version 8.1.0 via the software available on - https://www.support.xerox.com/en-us/product/core/downloads \n\n https://www.support.xerox.com/en-us/product/core/downloads", "supportingMedia": [{"type": "text/html", "value": "Improper limitation of a pathname to a restricted directory (<strong>Path Traversal</strong>) vulnerability in Xerox FreeFlow Core allows unauthorized path traversal leading to RCE. <br>This issue affects Xerox FreeFlow Core versions up to and including 8.0.7.<br><br>\n\n\n\n\n\nPlease consider upgrading to FreeFlow Core version 8.1.0 via the software available on - <a target=\"_blank\" rel=\"nofollow\" href=\"https://www.support.xerox.com/en-us/product/core/downloads\">https://www.support.xerox.com/en-us/product/core/downloads</a>\n\n<a target=\"_blank\" rel=\"nofollow\" href=\"https://www.support.xerox.com/en-us/product/core/downloads?language=en\"></a>\n\n<br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "10b61619-3869-496c-8a1e-f291b0e71e3f", "shortName": "Xerox", "dateUpdated": "2026-02-27T08:18:56.212Z"}}}, "cveMetadata": {"cveId": "CVE-2026-2251", "state": "PUBLISHED", "dateUpdated": "2026-03-03T15:36:53.126Z", "dateReserved": "2026-02-09T14:29:07.126Z", "assignerOrgId": "10b61619-3869-496c-8a1e-f291b0e71e3f", "datePublished": "2026-02-27T08:08:52.263Z", "assignerShortName": "Xerox"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "platforms": ["Windows"], "product": "FreeFlow Core", "vendor": "Xerox", "versions": [{"lessThanOrEqual": "8.0.7", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "10b61619-3869-496c-8a1e-f291b0e71e3f"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:xerox:freeflow_core:*:*:*:*:*:*:*:*", "matchCriteriaId": "BB016BFC-2C5B-4CFA-BC3C-B5A9DBF893F1", "versionEndExcluding": "8.1.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper limitation of a pathname to a restricted directory (Path Traversal) vulnerability in Xerox FreeFlow Core allows unauthorized path traversal leading to RCE. \nThis issue affects Xerox FreeFlow Core versions up to and including 8.0.7.\n\n\n\n\n\n\n\nPlease consider upgrading to FreeFlow Core version 8.1.0 via the software available on - https://www.support.xerox.com/en-us/product/core/downloads \n\n https://www.support.xerox.com/en-us/product/core/downloads"}, {"lang": "es", "value": "La vulnerabilidad de limitaci\u00f3n inadecuada de un nombre de ruta a un directorio restringido (Salto de ruta) en Xerox FreeFlow Core permite un salto de ruta no autorizado que conduce a RCE.\nEste problema afecta a las versiones de Xerox FreeFlow Core hasta la 8.0.7 inclusive.\n\nConsidere actualizar a la versi\u00f3n 8.1.0 de FreeFlow Core a trav\u00e9s del software disponible en - https://www.support.xerox.com/en-us/product/core/downloads\n\nhttps://www.support.xerox.com/en-us/product/core/downloads"}], "id": "CVE-2026-2251", "lastModified": "2026-06-17T10:30:38.033", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "10b61619-3869-496c-8a1e-f291b0e71e3f", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-2251", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-02-28T04:55:30.258511Z", "version": "2.0.3"}}]}, "published": "2026-02-27T09:16:16.950", "references": [{"source": "10b61619-3869-496c-8a1e-f291b0e71e3f", "tags": ["Vendor Advisory"], "url": "https://securitydocs.business.xerox.com/wp-content/uploads/2026/02/Xerox-Security-Bulletin-026-005-for-Xerox-Freeflow-Core.pdf"}], "sourceIdentifier": "10b61619-3869-496c-8a1e-f291b0e71e3f", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "10b61619-3869-496c-8a1e-f291b0e71e3f", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["windows"], "status": "affected", "versions": {"scheme": "generic", "value": "[0,8.0.7]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "FreeFlow Core", "source": "cna", "vendor": "Xerox"}, "product": "freeflow_core", "vendor": "xerox"}], "analysis": {"en": {"generated_at": "2026-04-16T15:29:53.897340+00:00", "value": {"mitigation_remediation": ["Apply the vendor\u2010supplied upgrade to Xerox FreeFlow Core version 8.1.0 from the official download portal.", "Configure the application to enforce strict input validation or directory whitelisting, ensuring that any file path handling rejects traversal characters and limits access to approved directories.", "Reduce the attack surface by limiting network exposure of the FreeFlow Core services, applying firewall rules, and continuously monitoring for anomalous file\u2011access or command\u2011execution attempts."], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "The affected product is Xerox FreeFlow Core, versions up to and including 8.0.7. The company has released version 8.1.0 with the fix. Administrators should verify the current software version and assess whether they are on a vulnerable build.", "description_and_impact": "The vulnerability in Xerox FreeFlow Core allows an attacker to perform path traversal, bypassing directory restrictions, and gain the ability to execute arbitrary code. The weakness is identified as CWE-22, which permits attackers to escape designated directories and interact with the underlying filesystem. Compromise of the application can lead to full system takeover, data exfiltration, and persistent footholds, severely impacting confidentiality, integrity, and availability of the host running the software.", "risk_and_exploitability": "The severity is high with a CVSS score of 9.8, yet the EPSS score is listed as less than 1%, indicating a very low probability of exploitation under current conditions. The vulnerability is not present in the CISA Known Exploited Vulnerabilities catalog. The likely attack vector is remote over the network through any exposed FreeFlow Core interface that accepts file paths, as no explicit entry mechanism is defined in the description; thus the attack is inferred to be network based."}}}}, "created": "2026-02-27T16:06:03.252790+00:00", "updated": "2026-04-16T15:30:06.232643+00:00", "vendors": ["xerox", "xerox$PRODUCT$freeflow_core"]}