Is CVE-2026-6815 actively exploited?

A proof-of-concept exploit is publicly available for CVE-2026-6815, but active exploitation has not been confirmed.

Can CVE-2026-6815 be exploited remotely?

No. CVE-2026-6815 requires local access to exploit.

What is the CVSS score of CVE-2026-6815?

CVE-2026-6815 has a CVSS score of 5.9 (MEDIUM).

HOME VULNERABILITIESCVE-2026-6815

MEDIUMPOC

CVE-2026-6815

Published: May 11, 2026· Updated: May 13, 2026

5.9

CVSS v3.1

EPSS:0.03%probability of exploitation in 30 daysPercentile:8.8th

Official Description

An arbitrary file write vulnerability exists in Casdoor's Local File System storage provider. Due to insufficient path sanitization, an authenticated attacker with administrative privileges can perform a Path Traversal attack to create or overwrite arbitrary files anywhere on the host filesystem, bypassing the application's intended storage sandbox.

NVD Source

Technical Analysis

CVE-2026-6815 requires local access, meaning attackers must already have a foothold on the target system.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A proof-of-concept (PoC) exploit exists for CVE-2026-6815. While not yet confirmed in active campaigns, the availability of PoC code increases exploitation risk substantially.