CVE Feed

    Dashboard / CVE / CVE-2026-25069

    CVE-2026-25069

    SunFounder Pironman Dashboard (pm_dashboard) version 1.3.13 and prior contain a path traversal vulnerability in the log file API endpoints. An unauthenticated remote attacker can supply traversal sequences via the filename parameter to read and delete arbitrary files. Successful exploitation can disclose sensitive information and delete critical system files, resulting in data loss and potential system compromise or denial of service.

    Published:Jan 31, 2026
    Last Modified:Apr 18, 2026
    EPS:Jan 31, 2026
    EPSS Score:0.00276
    CVSS Score:9.3

    Affected Products

    Vendor
    Sunfounder
    Product
    Pironman Dashboard

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High