CVE-2026-78192

{
  "etk_id": "ETK-2026-3180",
  "cve_id": "CVE-2026-78192",
  "display_id": "CVE-2026-78192",
  "ghsa_id": "GHSA-hf35-9v4j-23x2",
  "euvd_id": "EUVD-2026-114718",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated source disclosure in WebDyne default viewer",
  "summary": "WebDyne versions 2.022 through versions before 3.022 can expose application source through the default index viewer. An unauthenticated remote party may obtain source files beneath the document root, potentially revealing credentials embedded in application code, when the default viewer is enabled.",
  "mitigation": "Upgrade WebDyne to version 3.022 or later. Until upgrading, disable or restrict access to the built-in default index viewer, including deployments using the supplied wrapper scripts.",
  "vendor": null,
  "product": "WebDyne",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 2.022, < 3.022"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "3.022"
      ],
      "package_name": "WebDyne",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": null,
  "cvss_src": null,
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": true,
  "pipeline_minutes": 18.2120415,
  "t0_at": "2026-10-31T14:34:49.524000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-31T15:52:29.809256+00:00",
      "days": 0.05393848675925926,
      "is_lower_bound": false,
      "measured_at": "2026-10-31T14:34:49.524000+00:00",
      "url": null
    },
    "exploit": {
      "at": "2026-10-31T15:52:29.809256+00:00",
      "days": 0.05393848675925926,
      "is_lower_bound": false,
      "measured_at": "2026-10-31T14:34:49.524000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-31T14:34:49.524000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-31T14:34:49.524000+00:00",
      "url": "https://github.com/advisories/GHSA-hf35-9v4j-23x2"
    }
  }
}