Is CVE-2026-110116 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-110116 being exploited in the wild.

How severe is CVE-2026-110116?

Critical severity, with a CVSS score of 9.1, published 13 October 2026.

Which products and versions are affected?

Risesoft Digital-Infrastructure 9.6.5 through 9.6.11.

Is there a fix for CVE-2026-110116?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-110116 attacked?

It is attacked over the network, in a hosted service.

Am I affected by CVE-2026-110116?

Check whether you run Risesoft Digital-Infrastructure at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-110116: Risesoft-y9 Digital-Infrastructure path traversal in fileManager

CVE-2026-110116 · Severity: critical · CVSS 9.1 · Published 2026-10-13

Risesoft-y9 Digital-Infrastructure is a digital infrastructure platform that manages file operations through a file manager microservice. Unauthenticated attackers can exploit a path traversal vulnerability in the file manager to read any file accessible to the service process (including database credentials) and write arbitrary files, potentially achieving code execution. No authentication is required to exploit this vulnerability.

Technologies: Risesoft Digital-Infrastructure. Vendors: Risesoft.

Quick answers

Is CVE-2026-110116 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-110116 being exploited in the wild.
How severe is CVE-2026-110116?: Critical severity, with a CVSS score of 9.1, published 13 October 2026.
Which products and versions are affected?: Risesoft Digital-Infrastructure 9.6.5 through 9.6.11.
Is there a fix for CVE-2026-110116?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-110116 attacked?: It is attacked over the network, in a hosted service.
Am I affected by CVE-2026-110116?: Check whether you run Risesoft Digital-Infrastructure at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The Y9FileController in the fileManager microservice builds filesystem paths by concatenating a configured root directory with unsanitized fullPath and fileName request parameters without normalization or containment checks. The retrieveFileStream endpoint (POST /rest/retrieveFileStream) allows arbitrary file read via path traversal, while the storeFile endpoint (POST /rest/storeFile) allows arbitrary file write with automatic parent directory creation. The microservice has no authentication filter configured, making both handlers remotely accessible without credentials.

Affected products

Risesoft Digital-Infrastructure 9.6.5 through 9.6.11

Timeline

2026-10-13: disclosed

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.