{"affected":[{"defaultStatus":"unaffected","product":"Kobikom","source":"CNA: TR-CERT","vendor":"Kobikom Telecommunications and Informatics Services Inc.","versions":[{"lessThan":"KobiPBX-FOP3-SEC-r1","status":"affected","version":"0","versionType":"custom"}]}],"cveId":"CVE-2026-104720","cwes":["CWE-22"],"description":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Kobikom Telecommunications and Informatics Services Inc. Kobikom allows Path Traversal.\n\nThis issue affects Kobikom: before KobiPBX-FOP3-SEC-r1.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":7.5,"severity":"high","source":"CNA: TR-CERT","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"},{"score":7.5,"severity":"high","source":"NVD: iletisim@usom.gov.tr","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","version":"3.1"}],"modifiedAt":1793906227253,"publishedAt":1793884102254,"references":[{"source":"CNA: TR-CERT","tags":["government-resource"],"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1467"},{"source":"iletisim@usom.gov.tr","tags":[],"url":"https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1467"}],"remediation":[],"revision":"58fa2138905a6ebfacc3a21ccf356aa879c92351ad59323a8590d678c6ae55cf","sources":[{"modifiedAt":1793905384552,"name":"CNA: TR-CERT","retrievedAt":1793905742985,"url":"https://www.cve.org/CVERecord?id=CVE-2026-104720"},{"modifiedAt":1793906227253,"name":"NVD","retrievedAt":1793946346664,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-104720"}],"ssvc":{"assessedAt":1793897722914,"automatable":"yes","exploitation":"none","source":"ADP: CISA-ADP","technicalImpact":"partial"},"status":"published","title":"Path Traversal in Kobikom Telecommunications' Kobikom","updatedAt":1793946346664}