What is CVE-2026-11414?

CVE-2026-11414 is a critical-severity vulnerability in Altium Enterprise Server, classified under Path Traversal. CVSS score: 9.8/10. Published 2026-06-05.

How severe is CVE-2026-11414?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Path Traversal in Altium Enterprise Server

CVE-2026-11414

A hard-coded cryptographic key is used by Altium Enterprise Server to sign file download URLs in the Vault service. Because the key is identical across all installations, an unauthenticated network attacker who can reach the server can for…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.005 (38.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Altium Enterprise Server — versions 0
Altium On-prem_enterprise_server

Weakness classification (CWE)

References

4760f414-e1ae-4ff1-bdad-c7a9c3538b79 (Vendor Advisory)

Frequently asked questions

What is CVE-2026-11414?: CVE-2026-11414 is a critical-severity vulnerability in Altium Enterprise Server, classified under Path Traversal. CVSS score: 9.8/10. Published 2026-06-05.
How severe is CVE-2026-11414?: Critical severity. CVSS v3 base score is 9.8 out of 10.