CVE-2018-14429: Man-Cgi Project Man-Cgi

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI.

Affected products

• Man-Cgi Project Man-Cgi: before 1.16 (fixed in 1.16)

Published 2018-08-14. Last modified 2026-06-17.