CVE-2026-6377 — Path Traversal in Next4Biz's CSM (Customer Service Management)

CVE-2026-6377

Path Traversal in Next4Biz's CSM (Customer Service Management) PUBLISHED

Description (CNA)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Path Traversal. This issue affects CSM (Customer Service Management): from 6.8.9 before 8.0.3.

Affected (CNA)

Vendor / product	Versions
Next4Biz Information Technologies Inc. / CSM (Customer Service Management)	affected 6.8.9 before 8.0.3

CWE

CWE-22

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1027

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.