PT-2026-36708 · Av Stumpfl · Pixera Two Media Server

Trebledj · Published 2026-05-03 · Updated 2026-05-03 · CVE-2026-7704

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions AV Stumpfl Pixera Two Media Server versions prior to 25.2 R3

Description An issue exists in an unknown function of the Service Port 1338 component. This flaw allows for path traversal, a technique used to access files and directories outside the intended folder.

Recommendations Upgrade to version 25.2 R3.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-7704

Affected Products

Pixera Two Media Server

References · 11

• 🔥 https://gist.github.com/TrebledJ/585a20525e45549f299d282233632608 · Exploit
• https://help.pixera.one/changelogs-version-overviews/pixera-252-overview-changelog · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-7704 · Security Note
• https://vuldb.com/submit/805275 · Note
• https://twitter.com/VulmonFeeds/status/2050999087491625410 · Twitter Post
• https://t.me/CVEtracker/52583 · Telegram Post
• https://t.me/cveNotify/161940 · Telegram Post
• https://twitter.com/infoflowcloud/status/2050992706294329589 · Twitter Post
• https://vuldb.com/vuln/360873/cti · Note
• https://twitter.com/CVEnew/status/2050990517169611080 · Twitter Post
• https://vuldb.com/vuln/360873 · Note