Description
An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from the system via a crafted GET request.
High · 7.5
CVE-2026-30996
EUVD-2026-22977GHSA-m5qg-w79h-6284
An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and …
Published Apr 15, 2026 · Updated Apr 15, 2026 · Assigned by mitre