Path Traversal in Dynamicweb 9

CVE-2026-2731

Path traversal and content injection in JobRunnerBackground.aspx in DynamicWeb 8 (all) and 9 (<9.19.7 and <9.20.3) allows unauthenticated attackers to execute code via simple web requests

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.005 (42.0th percentile) — read the EPSS interpretation.