{
  "affected": [
    {
      "ranges": [
        {
          "database_specific": {
            "extracted_events": [
              {
                "introduced": "9.6.5"
              },
              {
                "last_affected": "9.6.11"
              },
              {
                "fixed": "9.6.11"
              }
            ],
            "source": [
              "AFFECTED_FIELD",
              "DESCRIPTION"
            ]
          },
          "events": [
            {
              "introduced": "e0749087e5865bd459e7794c98b0525768cd9bf0"
            },
            {
              "fixed": "b9dddb7c80d15c48ba912a6454fe926d6d191830"
            }
          ],
          "repo": "https://github.com/risesoft-y9/digital-infrastructure",
          "type": "GIT"
        }
      ]
    }
  ],
  "database_specific": {
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
      "CWE-22"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110116.json"
  },
  "details": "Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to write arbitrary files. Attackers can send crafted fullPath and fileName parameters to POST /rest/storeFile to create or overwrite service-writable files, potentially achieving code execution.",
  "id": "CVE-2026-110116",
  "modified": "2026-10-15T02:30:48.198984314Z",
  "published": "2026-10-13T16:53:14.032Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/110xxx/CVE-2026-110116.json"
    },
    {
      "type": "ADVISORY",
      "url": "https://hackmd.io/@1ExmmukzRMWN7B4gQ4W-4Q/digital-infrastructure-filemanager-path-traversal-rw"
    },
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110116"
    },
    {
      "type": "ADVISORY",
      "url": "https://www.vulncheck.com/advisories/digital-infrastructure-9.6.5-through-9.6.11-path-traversal-via-filemanager-storefile"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/risesoft-y9/Digital-Infrastructure"
    },
    {
      "type": "ARTICLE",
      "url": "https://github.com/risesoft-y9/Digital-Infrastructure/blob/v9.6.11/y9-digitalbase-module/y9-module-filemanager/risenet-y9boot-webapp-filemanager/src/main/java/net/risesoft/y9public/controller/Y9FileController.java#L168-L182"
    }
  ],
  "schema_version": "1.9.0",
  "severity": [
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N",
      "type": "CVSS_V4"
    }
  ],
  "summary": "Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile"
}