Path Traversal in Squinky86 Stigqter
CVE-2026-42881
STIGQter is an open-source reimplementation of DISA's STIG Viewer. From 0.1.2 to before 1.2.7, an attacker can achieve local code execution (LCE) with the privileges of the user running STIGQter. This requires user interaction: the victim…
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.000 (9.4th percentile) — read the EPSS interpretation.
Affected products
- Squinky86 Stigqter — versions >= 0.1.2, < 1.2.7
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)
- security-advisories@github.com (x_refsource_MISC)
- 134c704f-9b21-4f2e-91b3-4a467353bcc0