A vulnerability has been found in AV Stumpfl Pixera Two Media Server up to 25.1 R2. The affected element is an unknown function of the component Service Port 1338. Such manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. Upgrading to version 25.2 R3 is sufficient to fix this issue. It is advisable to upgrade the affected component.

Metrics

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Attack Requirements None

User Interaction None

Vulnerable System Confidentiality Impact Low

Vulnerable System Integrity Impact None

Vulnerable System Availability Impact None

Subsequent System Confidentiality Impact None

Subsequent System Integrity Impact None

Subsequent System Availability Impact None

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact Low

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Adjacent Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

Exploitation poc

Automatable no

Technical Impact partial

Affected Vendors & Products

Vendors Products
Av Stumpfl
  • Pixera Two Media Server

No data.

No data.

References
Link Providers
https://gist.github.com/TrebledJ/585a20525e45549f299d282233632608 cve-icon cve-icon
https://help.pixera.one/changelogs-version-overviews/pixera-252-overview-changelog cve-icon cve-icon
https://vuldb.com/submit/805275 cve-icon cve-icon
https://vuldb.com/vuln/360873 cve-icon cve-icon
https://vuldb.com/vuln/360873/cti cve-icon cve-icon
History

Mon, 04 May 2026 16:15:00 +0000

Type Values Removed Values Added
First Time appeared Av Stumpfl
Av Stumpfl pixera Two Media Server
Vendors & Products Av Stumpfl
Av Stumpfl pixera Two Media Server

Mon, 04 May 2026 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Sun, 03 May 2026 17:15:00 +0000

Type Values Removed Values Added
Description A vulnerability has been found in AV Stumpfl Pixera Two Media Server up to 25.1 R2. The affected element is an unknown function of the component Service Port 1338. Such manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. Upgrading to version 25.2 R3 is sufficient to fix this issue. It is advisable to upgrade the affected component.
Title AV Stumpfl Pixera Two Media Server Service Port 1338 path traversal
Weaknesses CWE-22
References
Metrics cvssV2_0

{'score': 3.3, 'vector': 'AV:A/AC:L/Au:N/C:P/I:N/A:N/E:POC/RL:OF/RC:C'}

cvssV3_0

{'score': 4.3, 'vector': 'CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C'}

cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C'}

cvssV4_0

{'score': 5.3, 'vector': 'CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P'}
cve-icon MITRE

Status: PUBLISHED

Assigner: VulDB

Published:

Updated: 2026-05-04T13:04:27.977Z

Reserved: 2026-05-02T20:40:55.929Z

Link: CVE-2026-7704

cve-icon Vulnrichment

Updated: 2026-05-04T13:04:24.215Z

cve-icon NVD

Status : Received

Published: 2026-05-03T17:16:13.580

Modified: 2026-05-03T17:16:13.580

Link: CVE-2026-7704

cve-icon Redhat

No data.