What is CVE-2026-7024?

CVE-2026-7024 is a medium-severity vulnerability in Rawchen Sims, classified under Path Traversal. CVSS score: 5.4/10. Published 2026-04-26.

How severe is CVE-2026-7024?

Medium severity. CVSS v3 base score is 5.4 out of 10.

Path Traversal in Rawchen Sims

CVE-2026-7024

A flaw has been found in rawchen sims up to 004f783b1db5ecdfad81c8fdc3b34171211112de. Affected by this issue is some unknown functionality of the file sims-master/src/web/servlet/file/DeleteFileServlet.java of the component deleteFileServl…

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.001 (23.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L.

Affected products

Rawchen Sims — versions 004f783b1db5ecdfad81c8fdc3b34171211112de

Weakness classification (CWE)

CWE-22 — Path Traversal

References

VDB-359603 | rawchen sims deleteFileServlet Endpoint DeleteFileServlet.java path traversal (technical-description, vdb-entry)
VDB-359603 | CTI Indicators (IOB, IOC, TTP, IOA) (signature, permissions-required)
Submit #797682 | sims Latest Unauthorized Arbitrary File Delete Vulnerability (third-party-advisory)
cna@vuldb.com (issue-tracking, exploit)

Frequently asked questions

What is CVE-2026-7024?: CVE-2026-7024 is a medium-severity vulnerability in Rawchen Sims, classified under Path Traversal. CVSS score: 5.4/10. Published 2026-04-26.
How severe is CVE-2026-7024?: Medium severity. CVSS v3 base score is 5.4 out of 10.