{"affected":[{"defaultStatus":"unaffected","product":"SS1","source":"CNA: jpcert","vendor":"DOS Co., Ltd.","versions":[{"lessThanOrEqual":"Agent version 17.0.0.50 (Media Versions 17.0.0e)","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"SS1 Cloud","source":"CNA: jpcert","vendor":"DOS Co., Ltd.","versions":[{"lessThanOrEqual":"Agent version 3.2.0","status":"affected","version":"0","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"rocoeyes","source":"CNA: jpcert","vendor":"Rococo Co. Ltd.","versions":[{"lessThanOrEqual":"Agent versions 3.1.1","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-113437","cwes":["CWE-22"],"description":"Path Traversal vulnerability exists in SS1/ SS1 Cloud provided by DOS Co., Ltd. and the ODM product rocoeyes provided by Rococo Co. Ltd. Arbitrary files may be deleted.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":5.3,"severity":"medium","source":"CNA: jpcert","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","version":"3.0"},{"score":6.9,"severity":"medium","source":"CNA: jpcert","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","version":"4.0"}],"modifiedAt":1794211029421,"publishedAt":1794211029421,"references":[{"source":"CNA: jpcert","tags":[],"url":"https://www.dos-osaka.co.jp/news/2026/11/261109.html"},{"source":"CNA: jpcert","tags":[],"url":"https://www.rococo.co.jp/wp-content/uploads/2026/11/20261109_rocoeyes.pdf"},{"source":"CNA: jpcert","tags":[],"url":"https://jvn.jp/en/jp/JVN76179675/"}],"remediation":[],"revision":"9f0d6f6465d9b426cc1f744b8e3bf88b6d6c6b8ee6ac82c93c233d5dda9cf6e8","sources":[{"modifiedAt":1794211029421,"name":"CNA: jpcert","retrievedAt":1794211699987,"url":"https://www.cve.org/CVERecord?id=CVE-2026-113437"}],"ssvc":null,"status":"published","title":"CVE-2026-113437","updatedAt":1794211699987}