CVE-2026-1022— Gotac｜Statistics Database System - Arbitrary File Read
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-1022
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Gotac｜Statistics Database System - Arbitrary File Read
Source: NVD (National Vulnerability Database)
Vulnerability Description
Statistics Database System developed by Gotac has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
相对路径遍历
Source: NVD (National Vulnerability Database)
Vulnerability Title
Gotac Statistics Database System 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Gotac Statistics Database System是中国台湾金谆（Gotac）公司的一个统计资料库系统。 Gotac Statistics Database System存在安全漏洞，该漏洞源于存在任意文件读取漏洞，可能导致未经验证的远程攻击者利用相对路径遍历下载任意系统文件。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Gotac | Statistics Database System | 0 ~ 1.0.3 | - |
II. Public POCs for CVE-2026-1022
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-1022
请登录查看更多情报信息。
Same Patch Batch · Gotac · 2026-01-16 · 6 CVEs total
| CVE-2026-1019 | 9.8 CRITICAL | Gotac｜Police Statistics Database System - Missing Authentication |
| CVE-2026-1021 | 9.8 CRITICAL | Gotac｜Police Statistics Database System - Arbitrary File Upload |
| CVE-2026-1018 | 7.5 HIGH | Gotac｜Police Statistics Database System - Arbitrary File Read |
| CVE-2026-1023 | 7.5 HIGH | Gotac｜Statistics Database System - Missing Authentication |
| CVE-2026-1020 | 5.3 MEDIUM | Gotac｜Police Statistics Database System - Absolute Path Traversal |
IV. Related Vulnerabilities
Same vendor: Gotac
- CVE-2026-1023
Gotac｜Statistics Database System - Missing Authentication - CVE-2026-1021
Gotac｜Police Statistics Database System - Arbitrary File Upl - CVE-2026-1020
Gotac｜Police Statistics Database System - Absolute Path Trav - CVE-2026-1019
Gotac｜Police Statistics Database System - Missing Authentica - CVE-2026-1018
Gotac｜Police Statistics Database System - Arbitrary File Rea
Same weakness: CWE-23
- CVE-2026-8209
Gibbon<30.0.01路径遍历漏洞导致拒绝服务 - CVE-2026-43533
OpenClaw < 2026.4.10 - Arbitrary Local File Read via QQBot M - CVE-2026-43616
Detect-It-Easy < 3.21 Path Traversal Arbitrary File Write - CVE-2026-42085
OpenC3 COSMOS: Arbitrary write to plugins directory via path - CVE-2026-22070
ColorOS Assistant Path Traversal Vulnerability
V. Comments for CVE-2026-1022
No comments yet