CVE-2026-18903

MEDIUM 4.3

yeqifu warehouse FileController.java path traversal

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. This issue affects some unknown processing of the file src/main/java/com/yeqifu/sys/controller/FileController.java. This manipulation of the argument path causes path traversal. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

CWE	CWE-22
Vendor	yeqifu
Product	warehouse
Published	Aug 5, 2026

Stay Ahead of the Next One

Get instant alerts for yeqifu warehouse

Be the first to know when new medium vulnerabilities affecting yeqifu warehouse are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

yeqifu / warehouse

aaf29962ba407d22d991781de28796ee7b4670e4

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/385940 vuldb.com: https://vuldb.com/vuln/385940/cti vuldb.com: https://vuldb.com/cve/CVE-2026-18903 vuldb.com: https://vuldb.com/submit/859531 fanatical-brain-9ba.notion.site: https://fanatical-brain-9ba.notion.site/warehouse-381f1a573df48073ae69fd68e2c27b69

Credits

🔍 paramecium (VulDB User) VulDB CNA Team