CVE-2023-43176: Afterlogic Aurora Files

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

A deserialization vulnerability in Afterlogic Aurora Files v9.7.3 allows attackers to execute arbitrary code via supplying a crafted .sabredav file.

Affected products

• Afterlogic Aurora Files: version 9.7.3 only

Published 2023-10-03. Last modified 2026-07-09.