Critical severity · published Sep 28, 2026
CVE-2026-73642
Path Traversal in Dayforce ESS Excelity
9.2
CVSS
0.4%
EPSS
No
On KEV
Description
Dayforce ESS Excelity is vulnerable to Path Traversal in file download functionality. An unauthenticated attacker can sent GET request with file path parameter set to any path including an absolute
local file path.
This issue was fixed in version V4.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 37% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EE
ESS Excelity · Dayforce
before V4 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-73642
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-73642
third-party-advisory
https://cert.pl/en/posts/2026/09/CVE-2026-73640
product
https://hcm.excelityglobal.com/ESS
More from ESS Excelity
9.3
CVE-2026-73640
Time-based SQL Injection in Dayforce ESS Excelity
5.1
CVE-2026-73641
Multiple Reflected XSS in Dayforce ESS Excelity