CVE-2026-28427 in OpenDeck
要約 (英語)
OpenDeck is Linux software for your Elgato Stream Deck. Prior to 2.8.1, the service listening on port 57118 serves static files for installed plugins but does not properly sanitize path components. By including ../ sequences in the request path, an attacker can traverse outside the intended directory and read any file OpenDeck can access. This vulnerability is fixed in 2.8.1.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
責任者
GitHub_M
予約する
2026年02月27日
公開
2026年03月04日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 348863 | nekename OpenDeck Request Path ディレクトリトラバーサル | 22 | 未定義 | 公式な修正 | CVE-2026-28427 |