CVE-2026-1523

High

Description

Path Traversal vulnerability in Digitek ADT1100 and Digitek DT950 from PRIMION DIGITEK, S.L.U (Azkoyen Group). This vulnerability allows an attacker to access arbitrary files in the server's file system, thet is, 'http://<host>/..%2F..% 2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd'. By manipulating the input to include URL encoded directory traversal sequences (e.g., %2F representing /), an attacker can bypass the input validation mechanisms ans retrieve sensitive files outside the intended directory, which could lead to information disclosure or further system compromise.

SeverityHigh
CVSS8.7
Exploit probability—
ProductDigitek ADT1100
PublishedFeb 5, 2026
First seenFeb 5, 2026

How to fix

Affected products

ProductAffected versionsFixed in
PRIMION DIGITEK Digitek ADT1100No range specified—
PRIMION DIGITEK Digitek DT950No range specified—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.