CVE-2009-10005: Contentkeeper Technologies Web Appliance

High severity, CVSS 8.7. EPSS: 1.1% chance of exploitation in the next 30 days.

ContentKeeper Web Appliance (now maintained by Impero Software) versions prior to 125.10 expose the mimencode binary via a CGI endpoint, allowing unauthenticated attackers to retrieve arbitrary files from the filesystem. By crafting a POST request to /cgi-bin/ck/mimencode with traversal and output parameters, attackers can read sensitive files such as /etc/passwd outside the webroot.

Affected products

Published 2025-08-20. Last modified 2026-10-01.