PT-2026-26998 · Netnumber · Netnumber Titan Enum/Dns/Np

Mobilenetworksecurity · Published 2026-03-22 · Updated 2026-03-22 · CVE-2019-25610

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions NetNumber Titan Master version 7.9.1

Description An issue in the 'drp' endpoint allows authenticated users to download arbitrary files by injecting directory traversal sequences. Attackers can manipulate the path parameter using base64-encoded payloads containing ../ sequences to bypass authorization and retrieve sensitive system files, such as /etc/shadow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-25610

Affected Products

Netnumber Titan Enum/Dns/Np

References · 4

• 🔥 https://exploit-db.com/exploits/46811 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25610 · Security Note
• https://vulncheck.com/advisories/netnumber-titan-master-path-traversal-via-drp · Note
• https://netnumber.com/products/#data · Note