Is CVE-2026-110115 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-110115 being exploited in the wild.

How severe is CVE-2026-110115?

High severity, with a CVSS score of 7.5, published 13 October 2026.

Which products and versions are affected?

Risesoft Digital-Infrastructure 9.6.5 through 9.6.11.

Is there a fix for CVE-2026-110115?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-110115 attacked?

It is attacked over the network.

Am I affected by CVE-2026-110115?

Check whether you run Risesoft Digital-Infrastructure at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-110115: Risesoft Digital-Infrastructure path traversal in file manager

CVE-2026-110115 · Severity: high · CVSS 7.5 · Published 2026-10-13

Risesoft Digital-Infrastructure is an infrastructure management platform whose file manager service handles file uploads and downloads. An unauthenticated remote attacker can read or write arbitrary files on the system by exploiting a path traversal vulnerability in the file manager controller, potentially exposing database credentials or achieving code execution.

Technologies: Risesoft Digital-Infrastructure. Vendors: Risesoft.

Quick answers

Is CVE-2026-110115 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-110115 being exploited in the wild.
How severe is CVE-2026-110115?: High severity, with a CVSS score of 7.5, published 13 October 2026.
Which products and versions are affected?: Risesoft Digital-Infrastructure 9.6.5 through 9.6.11.
Is there a fix for CVE-2026-110115?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-110115 attacked?: It is attacked over the network.
Am I affected by CVE-2026-110115?: Check whether you run Risesoft Digital-Infrastructure at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The Y9FileController in the file manager microservice builds filesystem paths via string concatenation of a configured root directory with user-supplied fullPath and fileName parameters without normalization or containment checking, allowing parent-directory traversal (CWE-22). The service declares no authentication mechanism, making the /rest/retrieveFileStream and /rest/storeFile endpoints reachable by unauthenticated attackers. An attacker can read arbitrary files the process can open (including application.yml with database and Redis credentials) or write files to arbitrary paths, potentially leading to code execution.

Affected products

Risesoft Digital-Infrastructure 9.6.5 through 9.6.11

Timeline

2026-10-13: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.