CVE-2026-25069

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-25069", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "state": "PUBLISHED", "assignerShortName": "VulnCheck", "dateReserved": "2026-01-28T21:47:35.120Z", "datePublished": "2026-01-31T23:46:59.669Z", "dateUpdated": "2026-07-14T15:53:39.770Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-07-14T15:53:39.770Z"}, "title": "SunFounder Pironman Dashboard <= 1.3.13 Path Traversal Arbitrary File Read/Deletion", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>SunFounder Pironman Dashboard (pm_dashboard) version 1.3.13 and prior contain a path traversal vulnerability in the log file API endpoints. An unauthenticated remote attacker can supply traversal sequences via the filename parameter to read and delete arbitrary files. Successful exploitation can disclose sensitive information and delete critical system files, resulting in data loss and potential system compromise or denial of service.</p>"}], "value": "SunFounder Pironman Dashboard (pm_dashboard) version 1.3.13 and prior contain a path traversal vulnerability in the log file API endpoints. An unauthenticated remote attacker can supply traversal sequences via the filename parameter to read and delete arbitrary files. Successful exploitation can disclose sensitive information and delete critical system files, resulting in data loss and potential system compromise or denial of service."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "lang": "en", "type": "CWE"}]}], "affected": [{"defaultStatus": "unknown", "packageURL": "pkg:github/sunfounder/pm_dashboard", "product": "Pironman Dashboard (pm_dashboard)", "repo": "https://github.com/sunfounder/pm_dashboard", "vendor": "SunFounder", "versions": [{"lessThanOrEqual": "1.3.13", "status": "affected", "version": "0", "versionType": "semver"}]}], "metrics": [{"cvssV4_0": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "baseScore": 9.3, "baseSeverity": "CRITICAL", "exploitMaturity": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "references": [{"tags": ["product"], "url": "https://github.com/sunfounder/pm_dashboard"}, {"tags": ["issue-tracking"], "url": "https://github.com/sunfounder/pm_dashboard/blob/main/pm_dashboard/pm_dashboard.py#L62"}, {"tags": ["issue-tracking"], "url": "https://github.com/sunfounder/pm_dashboard/blob/main/pm_dashboard/pm_dashboard.py#L440"}, {"tags": ["third-party-advisory"], "url": "https://www.vulncheck.com/advisories/sunfounder-pironman-dashboard-path-traversal-arbitrary-file-read-deletion"}, {"tags": ["technical-description", "exploit"], "url": "https://gist.github.com/chapochapo/5db8702ede862af5c59a28b5d5a0aba3"}], "credits": [{"lang": "en", "type": "finder", "value": "chapochapo"}], "x_generator": {"engine": "vulncheck"}, "source": {"discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-02T20:01:56.688361Z", "id": "CVE-2026-25069", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-02T20:02:08.707Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-25069", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2026-02-02T20:01:56.688361Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-02T20:02:04.558Z"}}], "cna": {"title": "SunFounder Pironman Dashboard <= 1.3.13 Path Traversal Arbitrary File Read/Deletion", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "chapochapo"}], "metrics": [{"format": "CVSS", "cvssV4_0": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 9.3, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/sunfounder/pm_dashboard", "vendor": "SunFounder", "product": "Pironman Dashboard (pm_dashboard)", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.3.13"}], "packageURL": "pkg:github/sunfounder/pm_dashboard", "defaultStatus": "unknown"}], "references": [{"url": "https://github.com/sunfounder/pm_dashboard", "tags": ["product"]}, {"url": "https://github.com/sunfounder/pm_dashboard/blob/main/pm_dashboard/pm_dashboard.py#L62", "tags": ["issue-tracking"]}, {"url": "https://github.com/sunfounder/pm_dashboard/blob/main/pm_dashboard/pm_dashboard.py#L440", "tags": ["issue-tracking"]}, {"url": "https://www.vulncheck.com/advisories/sunfounder-pironman-dashboard-path-traversal-arbitrary-file-read-deletion", "tags": ["third-party-advisory"]}, {"url": "https://gist.github.com/chapochapo/5db8702ede862af5c59a28b5d5a0aba3", "tags": ["technical-description", "exploit"]}], "x_generator": {"engine": "vulncheck"}, "descriptions": [{"lang": "en", "value": "SunFounder Pironman Dashboard (pm_dashboard) version 1.3.13 and prior contain a path traversal vulnerability in the log file API endpoints. An unauthenticated remote attacker can supply traversal sequences via the filename parameter to read and delete arbitrary files. Successful exploitation can disclose sensitive information and delete critical system files, resulting in data loss and potential system compromise or denial of service.", "supportingMedia": [{"type": "text/html", "value": "<p>SunFounder Pironman Dashboard (pm_dashboard) version 1.3.13 and prior contain a path traversal vulnerability in the log file API endpoints. An unauthenticated remote attacker can supply traversal sequences via the filename parameter to read and delete arbitrary files. Successful exploitation can disclose sensitive information and delete critical system files, resulting in data loss and potential system compromise or denial of service.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "shortName": "VulnCheck", "dateUpdated": "2026-07-14T15:53:39.770Z"}}}, "cveMetadata": {"cveId": "CVE-2026-25069", "state": "PUBLISHED", "dateUpdated": "2026-07-14T15:53:39.770Z", "dateReserved": "2026-01-28T21:47:35.120Z", "assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10", "datePublished": "2026-01-31T23:46:59.669Z", "assignerShortName": "VulnCheck"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "packageURL": "pkg:github/sunfounder/pm_dashboard", "product": "Pironman Dashboard (pm_dashboard)", "repo": "https://github.com/sunfounder/pm_dashboard", "vendor": "SunFounder", "versions": [{"lessThanOrEqual": "1.3.13", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "disclosure@vulncheck.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "SunFounder Pironman Dashboard (pm_dashboard) version 1.3.13 and prior contain a path traversal vulnerability in the log file API endpoints. An unauthenticated remote attacker can supply traversal sequences via the filename parameter to read and delete arbitrary files. Successful exploitation can disclose sensitive information and delete critical system files, resulting in data loss and potential system compromise or denial of service."}, {"lang": "es", "value": "SunFounder Pironman Dashboard (pm_dashboard) versi\u00f3n 1.3.13 y anteriores contienen una vulnerabilidad de salto de ruta en los endpoints de la API de archivos de registro. Un atacante remoto no autenticado puede suministrar secuencias de salto de ruta a trav\u00e9s del par\u00e1metro filename para leer y eliminar archivos arbitrarios. La explotaci\u00f3n exitosa puede divulgar informaci\u00f3n sensible y eliminar archivos cr\u00edticos del sistema, lo que resulta en p\u00e9rdida de datos y posible compromiso del sistema o denegaci\u00f3n de servicio."}], "id": "CVE-2026-25069", "lastModified": "2026-07-14T16:16:53.320", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "disclosure@vulncheck.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-25069", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2026-02-02T20:01:56.688361Z", "version": "2.0.3"}}]}, "published": "2026-02-01T00:16:19.107", "references": [{"source": "disclosure@vulncheck.com", "url": "https://gist.github.com/chapochapo/5db8702ede862af5c59a28b5d5a0aba3"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/sunfounder/pm_dashboard"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/sunfounder/pm_dashboard/blob/main/pm_dashboard/pm_dashboard.py#L440"}, {"source": "disclosure@vulncheck.com", "url": "https://github.com/sunfounder/pm_dashboard/blob/main/pm_dashboard/pm_dashboard.py#L62"}, {"source": "disclosure@vulncheck.com", "url": "https://www.vulncheck.com/advisories/sunfounder-pironman-dashboard-path-traversal-arbitrary-file-read-deletion"}], "sourceIdentifier": "disclosure@vulncheck.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "disclosure@vulncheck.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-18T00:51:28.437190+00:00", "value": {"mitigation_remediation": ["Upgrade to a version of Pironman Dashboard that has fixed the path traversal issue.", "Configure the application or surrounding firewall to reject traversal sequences by validating file paths or disabling the vulnerable API endpoint.", "If the upgrade cannot be performed immediately, restrict network access to the log file API to trusted internal hosts and enable system monitoring for unauthorized file reads or deletions."], "summary": {"action": "Patch Now", "impact": "Remote File Manipulation"}, "threat_synthesis": {"affected_systems": "The vulnerability affects SunFounder's Pironman Dashboard version 1.3.13 and all earlier releases. Systems running these versions are susceptible to arbitrary file read and deletion unless the API is disabled or filtered.", "description_and_impact": "SunFounder Pironman Dashboard (pm_dashboard) exposes a path traversal weakness in its log file API endpoints. An unauthenticated attacker can supply traversal sequences in the filename parameter to read or delete any file on the host. This flaw enables confidentiality violations, data loss, and potential system compromise or denial of service if critical configuration or code files are removed.", "risk_and_exploitability": "With a CVSS score of 9.3 the flaw is rated critical. The EPSS score is below 1\u202f% and the vulnerability is not listed in the CISA KEV catalog, indicating a low probability of current exploitation. Nonetheless, the impact is severe: an attacker needs only to send a crafted HTTP request to the log file API, which is unauthenticated and remote, to read sensitive data or erase system files. Monitoring for anomalous endpoints and applying the fix should be a top priority."}}}}, "created": "2026-02-02T09:26:39.873536+00:00", "updated": "2026-04-18T01:00:11.628022+00:00", "vendors": ["sunfounder", "sunfounder$PRODUCT$pironman_dashboard"]}