coaidev CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM coaidev CVE published 2026-10-16

CVE-2026-111618

CVE-2026-111618 CoAI Unauthenticated Path Traversal vulnerability allows attackers to download arbitrary files via archive download endpoints. CoAI users and administrators should assess exposure and prioritize remediation to prevent unauthorized access and data exposure. The vulnerability is caused by insufficient validation of user input in the hash query parameter, enabling attackers to supply ../ sequ [truncated]