Note: This data is for reference and cybersecurity research purposes only.CyStack advises users not to use this information for unlawful purposes.
CVE-2026-124326 is a vulnerability classified as Improper Limitation of a Pathname to a Restricted Directory, affecting Dinky (affected versions: 1.2.0, 1.2.1, and other affected versions). This vulnerability is rated Medium, with a CVSS score of 5.3. There is not enough data to determine whether this vulnerability has been exploited.
The analysis could not be completed. The original vulnerability data remains available below.
A flaw has been found in DataLinkDC Dinky up to 1.2.5. Impacted is the function file.getOriginalFilename of the file CatalogueController.java of the component Catalogue Upload. Executing a manipulation of the argument filename can lead to path traversal. The attack can be executed remotely. The exploit has been published and may be used. The researcher claims to have submitted a GHSA on the repository of the project.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
en
