CVE-2019-25333 - Bullwark Momentum Series JAWS 1.0 - 'Momentum Series JAWS' Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Back Back to CVE browser

HIGH

Bullwark Momentum Series JAWS 1.0 - 'Momentum Series JAWS' Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Published Feb 12, 2026

8.7

HIGH

CVSS 4.0

EPSS 0.68%

Description

Bullwark Momentum Series JAWS 1.0 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP request paths. Attackers can exploit the vulnerability by sending crafted GET requests with multiple '../' sequences to read sensitive files like /etc/passwd outside the web root directory.

Affected products

Vendor Bullwark Product Momentum Series JAWS Default
unknown
Affected
- 1.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Bullwark	Momentum Series JAWS	unknown	Affected 1.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19575
Advisory
https://web.archive.org/web/20190729023518/http://www.bullwark.net/
product
https://www.exploit-db.com/exploits/47773
exploit
https://www.vulncheck.com/advisories/bullwark-momentum-series-jaws-momentum-series-jaws
third-party-advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-19575		Advisory
https://web.archive.org/web/20190729023518/http://www.bullwark.net/		product
https://www.exploit-db.com/exploits/47773		exploit
https://www.vulncheck.com/advisories/bullwark-momentum-series-jaws-momentum-series-jaws		third-party-advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulnCheck

Published Feb 12, 2026

Updated Feb 13, 2026

Reserved Feb 12, 2026

Link CVE-2019-25333

CISA Vulnrichment

Updated Feb 13, 2026

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2019-25333

Red Hat

No data

ENISA EUVD

Assigner VulnCheck

Published Feb 12, 2026

Updated Feb 13, 2026

Link EUVD-2019-19575

GitHub

No data