Cloud Commander — CVE-2026-82460 (Critical)

Date Aug 29, 2026

Type Vendor advisory

Signal Critical vendor advisory

Vendor / Product Cloud · Commander

CVE CVE-2026-82460

Critical vendor advisory CVE-2026-82460

Summary

Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory.

Why it matters

This CVE carries a CRITICAL severity rating (CVSS 9.8) in Cloud Commander. Patch or mitigate promptly.

Operator check

Review CVE-2026-82460 in your asset inventory. Apply patches per vendor guidance and verify Commander is not exposed. CVSS score: 9.8.

Sources

NVD — CVE-2026-82460 Source reference Source reference

PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.

Get watched-vendor alerts Subscribe free Back to feed