CVE-2022-26276: Onenav

Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days.

An issue in index.php of OneNav v0.9.14 allows attackers to perform directory traversal.

Affected products

• Onenav Onenav: version 0.9.14 only

Published 2022-03-12. Last modified 2026-06-17.