CVE-2026-0805

An input neutralization vulnerability in the Backup Configuration component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.

More information : https://gitlab.com/crafty-controller/crafty-4/-/issues/650