Vulnerability Details CVE-2026-11944
openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionality that allows an authenticated attacker to read arbitrary files on the server via crafted path traversal sequences.
Exploit prediction scoring system (EPSS) score
CVSS Severity
CVSS v3 Score 6.5
References