Medium severity · published Sep 4, 2026
CVE-2026-74235
GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Configuration Download Handler
4.9
CVSS
0.8%
EPSS
No
On KEV
Description
GFI Exinda AI and ClearView before 7.6.5 contains a path traversal vulnerability in the system maintenance configuration download handler. The wcf_handle_download() function accepts parameters prefixed with v_del_ and appends their values directly to the base configuration directory path without sanitizing for directory traversal sequences. An authenticated attacker with Admin privileges can read arbitrary files from the system in the context of root.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.8% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GC
GFI ClearView · GFI Software
before 7.6.5 · source: vendor
GE
GFI Exinda AI · GFI Software
before 7.6.5 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-74235
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-74235
gfi.ai
https://gfi.ai/products-and-solutions/network-management-solutions/exinda-networkorchestrator/resources/documentation/product-releases
www.vulncheck.com
https://www.vulncheck.com/advisories/gfi-exinda-ai-clearview-path-traversal-via-configuration-download-handler
More from GFI ClearView
6.5
CVE-2026-74237
GFI Exinda AI / ClearView < 7.6.5 Argument Injection via Tools Iperf Client
6.5
CVE-2026-74236
GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion Handler