CVE-2026-0805: Craftycontrol Crafty Controller

High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days.

An input neutralization vulnerability in the Backup Configuration component of Crafty Controller allows a remote, authenticated attacker to perform file tampering and remote code execution via path traversal.

Affected products

• Craftycontrol Crafty Controller: from 4.5.0, before 4.8.0 (fixed in 4.8.0)

Published 2026-01-30. Last modified 2026-06-17.