CVE-2026-42269Published
countly-server: Path Traversal in delete_import Endpoint Allows Arbitrary File and Directory Deletion
Exact source revision recorded 23 Oct 2026 15:48:27 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-42269 · Microsoft / collected KEV context
cve-program · CVE-2026-42269
- https://github.com/Countly/countly-server/security/advisories/GHSA-5pmc-54j6-jcgq
- https://github.com/Countly/countly-server/commit/764e2a1d86f9af600113f77422d520338c214229
- https://github.com/Countly/countly-server/commit/b652ee8dafa91602705004d0edb602a91a0d845e
- https://github.com/Countly/countly-server/blob/master/CHANGELOG.md#version-250344
- https://github.com/Countly/countly-server/releases/tag/24.05.50
- https://github.com/Countly/countly-server/releases/tag/25.03.44
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.