CVE-2026-39364Proof of concept (PoC) published · CISA
Vite has a `server.fs.deny` bypass with queries
CVSS score
8.2
EPSS probability
%1.5
Risk score
0.1
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Nuclei: Vite Dev Server - Directory Traversal
Makefile Go / Python
Similar Vulnerabilities
8.2
CVE-2026-39363Vite Affected by Arbitrary File Read via Vite Dev Server WebSocket
Patch status unknown Public Exploits:1EPSS %3
5.3
CVE-2026-39365Path traversal in Vitejs
Patch status unknown Public Exploits:2EPSS %1
7.5
CVE-2024-52011launch-editor vulnerable to command injection via the crafted request on Windows
Patch status unknownEPSS %1
5.3
CVE-2025-58752Information exposure in Vitejs
Patch verified Public Exploits:1EPSS %1
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-39364"