All verified exploits

CVE-2026-30240 PWA ZIP Path Traversal

CVE-2026-30240 is a critical-severity vulnerability. AttackerView checks Budibase sites for it with a live exploit check.

Pentest critical Budibase Added 8mo ago cve-verified-cve-2026-30240

Is my site vulnerable to CVE-2026-30240?

Reads arbitrary server files including /proc/1/environ through path traversal in the PWA ZIP processing endpoint, exfiltrating all secrets and credentials in a single request.

Related Budibase exploits

CVE-2026-35216 Unauthenticated Remote Code Execution via Webhook Command Injection

Is your app exploitable through CVE-2026-30240?

Scan your domain free