CVE-2026-9166 — LFI in GIS Informatics' GisLab Laboratory Management System

CVE-2026-9166

LFI in GIS Informatics' GisLab Laboratory Management System PUBLISHED

Description (CNA)

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal. This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.

Affected (CNA)

Vendor / product	Versions
GIS Informatics / GisLab Laboratory Management System	affected 1.4.03 before 1.5

CWE

CWE-22

References

https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1063

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.