Is CVE-2026-105275 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-105275 being exploited in the wild.

How severe is CVE-2026-105275?

Medium severity, with a CVSS score of 4.3, published 8 October 2026.

Which products and versions are affected?

Satel Netco Design prior to v2.1.7.

Is there a fix for CVE-2026-105275?

Yes: fixed in v2.1.7. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

How is CVE-2026-105275 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-105275?

Check whether you run Satel Netco Design at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-105275: Satel Netco Design relative path traversal in data import

CVE-2026-105275 · Severity: medium · CVSS 4.3 · Published 2026-10-08

Satel Netco Design is a networked industrial control system management application used worldwide in critical communications infrastructure. An authenticated user with basic viewer privileges can exploit a path traversal flaw in the data import feature to access files outside the intended directory and determine whether specific files exist on the host system, potentially exposing sensitive configuration or system information.

Technologies: Satel Netco Design. Vendors: Satel.

Quick answers

Is CVE-2026-105275 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-105275 being exploited in the wild.
How severe is CVE-2026-105275?: Medium severity, with a CVSS score of 4.3, published 8 October 2026.
Which products and versions are affected?: Satel Netco Design prior to v2.1.7.
Is there a fix for CVE-2026-105275?: Yes: fixed in v2.1.7. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-105275 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-105275?: Check whether you run Satel Netco Design at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

How to fix

Fixed in: v2.1.7

Technical details

A relative path traversal vulnerability in the data import functionality of Netco Design versions prior to v2.1.7 allows authenticated users with Viewer privileges to access arbitrary file paths on the host system. The vulnerability can be exploited over the network without user interaction, and application responses reveal whether queried files exist, enabling an attacker to enumerate the filesystem. No authentication bypass is required, only valid Viewer-level credentials.

Affected products

Satel Netco Design prior to v2.1.7

Timeline

2026-10-08: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.