AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2026-1186

UNKNOWN · CVSS N/A EPSS 0.34%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-02-02 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. See the original NVD description below for full technical details.

CVE
CVE-2026-1186
Severity
UNKNOWN
CVSS
N/A
EPSS
0.34%

Original NVD Description

EAP Legislator is vulnerable to Path Traversal in file extraction functionality. Attacker can prepare zipx archive (default file type used by the Legislator application) and choose arbitrary path outside the intended directory (e.x. system startup) where files will be extracted by the victim upon opening the file. This issue was fixed in version 2.25a.