Security Advisory
CVE-2026-6377
CVSS 7.5
HIGH
Vulnerability Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Next4Biz Information Technologies Inc. CSM (Customer Service Management) allows Path Traversal.
This issue affects CSM (Customer Service Management): from 6.8.9 through 07092026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published Date
2026-09-07T15:17:31.547
Data Feed
NIST National Vulnerability Database