점검 대응긴급KEV 미등록
CVE-2026-14439
Altium Altium Enterprise Server, Altium 365 취약점
A path traversal vulnerability exists in the Git Service component shared by Altium Enterprise Server and Altium 365. The service accepts a sequence of post-clone file-manipulation operations that use user-supplied paths without validation, allowing an authenticated user with basic git access to move arbitrary files outside the intended repository area. This file-move primitive can be used to place attacker-controlled script content into directories where it is later executed by the service, resulting in remote code execution under the Git Service account. On multi-tenant Altium 365 deploym...
- 대응 우선순위
- 점검
- CVSS
- 9.4
- EPSS
- 0.60% 백분위 45.4% · 2026.08.03 기준
- CISA KEV
- 미등록
- 조치 기한
- -
- 공개일
- 2026.07.02