CVE-2026-27884

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-27884

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-27884.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-27884

Aliases

GHSA-fccr-6qm2-7h27

Published

2026-02-26T00:39:15Z

Modified

2026-08-12T03:51:22Z

Severity

5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N CVSS Calculator

Summary

NetExec vulnerable to arbitrary file write via path traversal in spider_plus module

Details

NetExec is a network execution tool. Prior to version 1.5.1, the module spider_plus improperly creates the output file and folder path when saving files from SMB shares. It does not take into account that it is possible for Linux SMB shares to have path traversal characters such as ../ in them. An attacker can craft a filename in an SMB share that includes these characters, which when spider_plus crawls and downloads, can write or overwrite arbitrary files. The issue is patched in v1.5.1. As a workaround, do not run spider_plus with DOWNLOAD=true against targets.

Database specific

{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27884.json"
}

References

Affected packages

Git / github.com/pennyw0rth/netexec

Affected ranges

Type

GIT

Repo

https://github.com/pennyw0rth/netexec

Events

Introduced

Fixed

7d027f2774d0520b322d60f9c99b9ab3edb4035e

Database specific

Show details

{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.5.1"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

v1.*

v1.0.0

v1.2.0

v1.3.0

v1.4.0

v1.5.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-27884.json"