Skip to content
skopnix
Dossier · Vulnerability

Vulnerability

CVE-2026-54617

  1. Disclosed
  2. 30 days →First PoC

Signals

Exploited in the wild
Not on KEVNot in CISA's catalogue as of the last daily pull. Absence is not proof of safety.
EPSS · 30-day forecast
3%Chance of exploitation in the next 30 days, 87th percentile of all CVEs. A forecast; KEV outranks it.
CVSS · NVD
not stated by sourcesNo NVD record yet.
Internet exposure
not stated by sourcesNo exposure census on this CVE's dispatches.

Exploits

1 known · links only

Nuclei1

  1. GravitLauncher LaunchServer <=5.7.11 - Unauthenticated Path Traversal to Arbitrary File Read ↗

    LaunchServer's Netty FileServerHandler computes the served path by stripping one leading character on the assumption that every request-target begins with '/'. Netty's HttpServerCodec accepts a request-target without a leading slash verbatim, so a request without a leading slash bypasses path normalization and escapes the updatesDir. The file server is enabled by default (netty.fileServerEnabled=true) on 0.0.0.0:9274 with no authentication, allowing an unauthenticated remote GET to read any file

    yaml · seen 2026-10-18

Detections

3 rules · Sigma · QRadar · Cortex

  1. CVE exploitation

    CVE-2026-54617 exploitation attempt

    CVE-2026-54617

    T1190conf 70SIGAQLXQL

Generated by skopnix from this finding, each with false-positive notes. Open the list →

On the wire

0 dispatches

No dispatch on our wire has named this CVE yet.

Watch this one?

KEV additions reach Telegram and the KEV-only RSS as they land.

Follow on TelegramKEV RSSAPI

Check your stack

Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.

Stack checkNo key. No signup.