CVE-2026-78212
Received Received - Intake

Arbitrary File Read in 4MOSAn via Relative Path Traversal

Publication date: 2026-08-24

Last updated on: 2026-08-24

Assigner: TWCERT/CC

Description
4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-24
Last Modified
2026-08-24
Generated
2026-08-24
AI Q&A
2026-08-24
EPSS Evaluated
N/A
NVD
CVE-2026-78212
EUVD
EUVD-2026-64708

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
4mosan_security_technology 4mosan_gcb_doctor to 20260621 (exc)
4mosan_security_technology 4mosan_management_center to 20260621 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-23 The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-78212 is an Arbitrary File Read vulnerability in 4MOSAn software, specifically affecting 4MOSAn GCB Doctor and Management Center. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files from vulnerable systems.

Detection Guidance

Detecting this vulnerability requires checking if your 4MOSAn GCB Doctor or Management Center software is running a vulnerable version (before 20260621). Inspect installed versions via package managers like pkg on FreeBSD or check system logs for software updates. Network scanning tools like Nmap may identify exposed instances of the software.

Impact Analysis

This vulnerability allows attackers to read sensitive system files without authentication. This could lead to exposure of confidential data, system configurations, or credentials stored on the affected system.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements. Organizations may face compliance violations, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Immediately update 4MOSAn GCB Doctor and Management Center to version 20260621 or later. Perform a FreeBSD-GCB Management Center security upgrade as recommended. Ensure the software is not exposed to untrusted networks and restrict access via firewalls.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-78212. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart