CVE-2018-17785

CVE-2018-17785 is a directory traversal vulnerability affecting Blynk server versions prior to 0.39.7. An unauthenticated attacker can exploit this flaw by manipulating URIs containing "/static" or "/static/js" to access arbitrary files on the server, such as /etc/passwd. This vulnerability carries a CVSSv3 score of 7.5 (HIGH) due to its network-based attack vector and high confidentiality impact, requiring no user interaction or privileges. While the EPSS score is low and there's no evidence of active exploitation, public exploit code, or significant community discussion, organizations using affected Blynk server versions should prioritize patching to mitigate this risk.