Vulnerability Details CVE-2026-13716
Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Controller application and perform remote code execution.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 43.8%
CVSS Severity
CVSS v3 Score 9.1