CVE-2018-17785: Blynk Blynk-Server

High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days.

In blynk-server in Blynk before 0.39.7, Directory Traversal exists via a ../ in a URI that has /static or /static/js at the beginning, as demonstrated by reading the /etc/passwd file.

Affected products

• Blynk Blynk-Server: before 0.39.7 (fixed in 0.39.7)

Published 2018-09-30. Last modified 2026-06-17.