PT-2026-52123 · Aten · Unizon

Published 2026-06-24 · Updated 2026-06-24 · CVE-2026-9776

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ATEN Unizon (affected versions not specified)

Description A directory traversal flaw exists in the writeFileToHttpServletResponse() function. The issue is caused by insufficient validation of a user-supplied path before it is used in file operations, allowing remote attackers to disclose sensitive information in the context of SYSTEM without requiring authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2026-9776

ZDI-26-380

Affected Products

Unizon

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-9776 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-26-380 · Security Note
• https://aten.com/global/en/supportcenter/info/security-advisory/29 · Vendor Advisory