CVE-2026-2753

CVE-2026-2753 describes an Absolute Path Traversal vulnerability in Navtor NavBox, where an HTTP service fails to properly sanitize user-supplied path input. This allows unauthenticated remote attackers to retrieve arbitrary files from the underlying filesystem, potentially exposing sensitive configuration and system information. The vulnerability is rated as High severity (CVSS 7.5), indicating a low attack complexity and no user interaction required for successful exploitation, leading to a high impact on confidentiality. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered some community discussion, suggesting awareness among security researchers.