Privilege escalation in Altium Enterprise Server
CVE-2026-11423
A path traversal vulnerability exists in the Altium Enterprise Server Collaboration Service due to improper handling of user-supplied filenames in the MCAD and Simulation file download flows. A regular authenticated user can submit a colla…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.003 (24.3th percentile) — read the EPSS interpretation.
Affected products
- Altium Enterprise Server — versions 0