Unauthenticated Path Traversal in Risesoft-y9 v9.6.5-9.6.11 Allows Arbitrary File Write

Risesoft-y9 Digital-Infrastructure versions 9.6.5 through 9.6.11 contain a high-severity path traversal vulnerability that allows unauthenticated attackers to write arbitrary files. According to the National Vulnerability Database, this flaw resides in the fileManager storeFile endpoint. Attackers can send crafted fullPath and fileName parameters to POST /rest/storeFile to create or overwrite service-writable files. This capability potentially enables remote code execution on affected systems.

Which systems are exposed to this unauthenticated file write flaw?

The vulnerability impacts Risesoft-y9 Digital-Infrastructure software versions 9.6.5 through 9.6.11. Any organization running these specific versions is exposed to the risk of arbitrary file writes. The flaw does not require authentication, meaning any internet-facing instance of these versions is vulnerable to exploitation. There is no mention of earlier or later versions being affected in the current advisory.

How does the path traversal mechanism work in this endpoint?

Attackers exploit the fileManager storeFile endpoint by sending malicious POST requests to /rest/storeFile. They craft specific fullPath and fileName parameters to traverse directory structures. This allows them to write data to locations outside the intended storage area. If they can overwrite files writable by the service account, they may achieve code execution. The weakness is classified as CWE-22, indicating improper limitation of a pathname to a restricted directory.

What is the severity rating and potential impact?

The National Vulnerability Database assigns a CVSS score of 8.8, rating the severity as HIGH. The primary impact is the ability to write arbitrary files on the host system. By overwriting service-writable files, attackers can potentially execute code with the privileges of the service running the application. This represents a significant security risk for any organization using the affected versions of Risesoft-y9 Digital-Infrastructure.

Is there a confirmed fix or patch available yet?

The source material does not state whether a fix or patch is available for CVE-2026-110116. Organizations using affected versions should monitor for updates from the vendor. In the meantime, defensive measures such as restricting access to the /rest/storeFile endpoint can reduce exposure. That suggests teams should prioritize network segmentation for these endpoints until more information is available.

Detection notes

Teams usually monitor web server logs for unusual POST requests to file management endpoints. Look for requests containing encoded path traversal sequences in parameters like fullPath or fileName. Alert on successful writes to unexpected locations or files with unusual extensions. Check for new files appearing in system directories that the web service should not access. Verify that file creation events align with legitimate user activity. Investigate any unauthenticated access attempts to sensitive endpoints immediately.

Background: National Vulnerability Database

The National Vulnerability Database is the U.S. government’s repository of security flaws in software and hardware. It assigns unique identifiers to each issue, allowing organizations to track, prioritize, and remediate risks using standardized references rather than vague descriptions.

Read the full guide: National Vulnerability Database: Meaning, Structure, and Daily Use

What to do and how to stay safe: Risesoft-y9

• Restrict network access to the /rest/storeFile endpoint to trusted internal IPs only.
• Monitor web server logs for POST requests containing path traversal characters.
• Verify that file writing operations are limited to designated directories.
• Update Risesoft-y9 Digital-Infrastructure once the vendor provides an update.

Step-by-step guide: Patch Management Checklist: Secure Systems Without Breaking Them

General security guidance from the Firewall Scoop newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

What is the CVE ID for this Risesoft-y9 vulnerability?

The CVE ID is CVE-2026-110116.

Which versions of Risesoft-y9 Digital-Infrastructure are affected?

Versions 9.6.5 through 9.6.11 are affected by this vulnerability.

What is the CVSS score for CVE-2026-110116?

The CVSS score is 8.8, which is rated as HIGH severity.