CVE-2026-124509 in Floci
Prediction
by VulDB Data Team • 11/08/2026
A vulnerability was identified in <a href="/product/floci-io:floci">floci-io Floci up to 2.1.0</a>. The affected element is the function <code>S3Destination.bucketName</code> of the file <em>services/firehose/model/DeliveryStreamDescription.java</em> of the component <em>S3 Destination Configuration Handler</em>. Such manipulation of the argument <em>BucketARN</em> leads to path traversal. The attack can be launched remotely. The exploit is publicly available and might be used. Upgrading to version 2.2.0 is sufficient to fix this issue. The name of the patch is <em>b986b95074ef524019be7af51e1df172e48faa4b</em>. You should upgrade the affected component.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.