What is GHSA-52c8-5776-8c84?

GHSA-52c8-5776-8c84 is a security advisory published by GitHub Security Advisories with Critical severity. Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 ...

Which CVE IDs does GHSA-52c8-5776-8c84 cover?

GHSA-52c8-5776-8c84 covers the following CVE IDs: CVE-2026-55393. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-52c8-5776-8c84Critical

Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 ...

Vendor

GitHub Security Advisories

Published

October 1, 2026

Last Modified

October 1, 2026

🔗 CVE IDs covered (1)

CVE-2026-55393 →

📋 Description

Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote unauthenticated attackers to read configuration and security parameters on Teledyne FLIR PackBot and FirstLook robots running this software via path traversal.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-55393
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0029.md
https://github.com/advisories/GHSA-52c8-5776-8c84