---
id: CVE-2026-82915
title: >-
  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
  vulnerability in Bimser Solution Software Trade Inc
summary: >-
  Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
  vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and
  Workflow Management System allows Path Traversal.


  This issue affects eBA Plus Docu…
severity: medium
cvss: 6.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'
cwe:
  - CWE-22
vendor: Bimser Solution Software Trade Inc.
product: eBA Plus Document and Workflow Management System
affected:
  - eba_plus_document_and_workflow_management_system >= 6.7.141 < 10.0.11
published: '2026-09-28'
updated: '2026-09-28'
sourceUpdated: '2026-09-28T14:31:05.267'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-82915'
references:
  - url: 'https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-1197'
    label: iletisim@usom.gov.tr
tags:
  - nvd
  - cve.org
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-28T13:05:42.746362Z'
ingestedAt: '2026-09-28T09:06:28.560Z'
epss: 0.00295
epssPercentile: 0.2206
---

## Overview

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal.

This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.11.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.