CVE-2026-22338

HighCVSS 8.1

Published: 17/06/2026(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Summary

There is a vulnerability in EcoBlue versions up to 1.15 that allows unauthenticated local file inclusion.

An attacker could gain access to sensitive files on the server, potentially leading to data exposure or further attacks.

It is recommended to upgrade to the latest version of EcoBlue to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Local File Inclusion in EcoBlue <= 1.15 versions.