Axel Download Accelerator CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Axel Download Accelerator CVE published 2026-10-28

CVE-2026-118485

CVE-2026-118485 is a high-severity vulnerability in Axel Download Accelerator versions 2.17.14 and earlier. The vulnerability allows an attacker to write downloaded content to arbitrary filesystem paths relative to the current working directory by exploiting the URL percent-decoding feature. This can lead to potential security breaches if not addressed promptly. Defenders and administrators should assess [truncated]