# CVE-2026-87747: Ragic Enterprise Cloud Database arbitrary file read via path traversal

Source: https://junglewise.ai/threats/cve-2026-87747-ragic-enterprise-cloud-database-arbitrary-file-read-via-path  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-09. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-87747 · Severity: medium · CVSS 4.9 · Published 2026-09-09

Ragic's Enterprise Cloud Database is a cloud-based data management platform used by organizations to store and manage business data. Attackers with administrative privileges can exploit a path traversal flaw to download arbitrary system files, potentially exposing sensitive configuration data, credentials, or customer information stored on the server.

Technologies: [Ragic Enterprise Cloud Database](https://junglewise.ai/threats/technologies/enterprise-cloud-database). Vendors: [Ragic](https://junglewise.ai/threats/vendors/ragic).

## Quick answers

**Is CVE-2026-87747 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-87747 being exploited in the wild.

**How severe is CVE-2026-87747?** Medium severity, with a CVSS score of 4.9, published 9 September 2026.

**Which products and versions are affected?** Ragic Enterprise Cloud Database.

**Is there a fix for CVE-2026-87747?** A patch was published on 2026-07-09. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-87747 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-87747?** Check whether you run Ragic Enterprise Cloud Database. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a relative path traversal flaw in Ragic's Enterprise Cloud Database that allows arbitrary file read. An attacker with high-level privileges (administrative access) can craft requests using path traversal sequences to bypass directory restrictions and download arbitrary system files from the server. The vulnerability is network-accessible with no user interaction required, but requires prior authentication with administrative or privileged credentials. An attacker can achieve confidentiality impact by exfiltrating sensitive files. A patch was released on 2026-07-09 or later to remediate this issue.

## Affected products

- Ragic Enterprise Cloud Database

## Timeline

- 2026-09-09: disclosed
- 2026-07-09: patched

## References

- [https://www.twcert.org.tw/en/cp-139-11190-7a985-2.html](https://www.twcert.org.tw/en/cp-139-11190-7a985-2.html)
- [https://www.twcert.org.tw/tw/cp-132-11189-68e64-1.html](https://www.twcert.org.tw/tw/cp-132-11189-68e64-1.html)

## Related threats

- [Ragic Enterprise Cloud Database arbitrary file upload](https://junglewise.ai/threats/cve-2026-15553-ragic-enterprise-cloud-database-arbitrary-file-upload)
- [Ragic Enterprise Cloud Database stored XSS](https://junglewise.ai/threats/cve-2026-15552-ragic-enterprise-cloud-database-stored-xss)
- [Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic Key vulnerability, allowing…](https://junglewise.ai/threats/cve-2025-15016-enterprise-cloud-database-developed-by-ragic-has-a-hard-coded)
- [Enterprise Cloud Database developed by Ragic has a Arbitrary File Read vulnerability, allowing unauthenticated remote…](https://junglewise.ai/threats/cve-2025-15015-enterprise-cloud-database-developed-by-ragic-has-a-arbitrary-file)