{"id":"CVE-2026-73642","revision":"7787d3c0f425475e80856d68e2765b8c","records":[{"revision":"7787d3c0f425475e80856d68e2765b8c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-73642","aliases":[],"title":"Path Traversal in Dayforce ESS Excelity","description":"Dayforce ESS Excelity is vulnerable to Path Traversal\u00A0 in file download functionality. An unauthenticated attacker can sent GET request with file path parameter set to any path including an\u00A0absolute\nlocal file path.\n\n\nThis issue was fixed in version V4.","state":0,"publishedAt":"2026-09-28T13:12:46.426+00:00","modifiedAt":"2026-10-13T13:20:58.581+00:00","affected":[{"ecosystem":"Vendor product","name":"ESS Excelity","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Dayforce\",\n                    \"product\": \"ESS Excelity\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"0\",\n                            \"lessThan\": \"V4\",\n                            \"versionType\": \"custom\"\n                        }\n                    ],\n                    \"defaultStatus\": \"unaffected\"\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N","score":9.2,"severity":"CRITICAL"}],"references":["https://cert.pl/en/posts/2026/09/CVE-2026-73640","https://hcm.excelityglobal.com/ESS"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-73642","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-73642","identifiers":["CVE-2026-73642"]},"retained":false,"historicalAffected":[]}],"coverage":[]}