CVE-2026-24464
MEDIUM
NVD
CVSS Score
6.8
Severity
MEDIUM
Published
May 13, 2026
Vendor
unknown
Description
When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator role privileges to cross a security boundary and delete files. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.