Ghostwire

CVE-2026-19758: A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the...

HIGH CVSS 7.3 Exploit Available

Published: August 14, 2026 | Last Modified: August 14, 2026

Description

A vulnerability was determined in dromara lamp-cloud up to 5.10.0. This issue affects some unknown processing of the file FileChunkController.java of the component chunk-check endpoint. Executing a manipulation of the argument Name can lead to path traversal. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Ghostwire Analysis — What This Means Practically

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

References