CVE-2026-92970
HUBzero CMS through 2.2.32 Path Traversal via File Upload
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
HUBzero CMS through 2.2.32 contains a path traversal vulnerability in project file upload handlers that allows authenticated project members to write arbitrary files outside the project repository. Attackers can supply traversal sequences in upload parameters to write files to attacker-chosen paths with web server privileges, potentially enabling code execution.
| CWE | CWE-22 |
| Vendor | hubzero |
| Product | hubzero-cms |
| Published | Sep 17, 2026 |
Stay Ahead of the Next One
Get instant alerts for hubzero hubzero-cms
Be the first to know when new high vulnerabilities affecting hubzero hubzero-cms are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
hubzero / hubzero-cms
0 ≤ 2.2.32
References
github.com: https://github.com/hubzero/hubzero-cms/commit/4a58215463e5d42f8d03567358171383da939946 github.com: https://github.com/hubzero/hubzero-cms/commit/5b4c4aefedf647390465cdfd0e7fa626c3e1cb39 github.com: https://github.com/hubzero/hubzero-cms/blob/v2.2.32/core/plugins/projects/files/connections.php#L812-L815 github.com: https://github.com/hubzero/hubzero-cms/blob/v2.2.32/core/libraries/Hubzero/Filesystem/Entity.php#L53-L73 github.com: https://github.com/hubzero/hubzero-cms/blob/v2.2.32/core/components/com_projects/api/controllers/filesv1_0.php#L809-L880 github.com: https://github.com/hubzero/hubzero-cms vulncheck.com: https://www.vulncheck.com/advisories/hubzero-cms-through-2.2.32-path-traversal-via-file-upload
Credits
ayeshaaaa472