CVE-2020-26037

Critical · CVSS 9.8

Even Balance Punkbuster — Directory Traversal leading to Remote Code Execution

CVSS: 9.8; nvd
EPSS: 2.05%; 79th pct
KEV: No
Class: other; CWE-22

Description

Directory Traversal vulnerability in Server functionalty in Even Balance Punkbuster version 1.902 before 1.905 allows remote attackers to execute arbitrary code.

Search profile — drives PoC discovery

Symbols pbsvpbclPunkBuster Serverpb_sv_directory traversalpath traversal..\../pb_sv_LogCeilingpb_sv_LogFloorpb_sv_update

Keywords CVE-2020-26037Punkbuster directory traversalEven Balance Punkbuster RCEPunkbuster 1.902 exploitPunkbuster path traversalPunkbuster server vulnerabilityhacking punkbuster prizmantPunkbuster 1.905 patchPunkbuster arbitrary code execution

Versions: 1.902 before 1.905

References

https://medium.com/@prizmant/hacking-punkbuster-e22e6cf2f36e
http://even.com
http://punkbuster.com
https://medium.com/%40prizmant/hacking-punkbuster-e22e6cf2f36e

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T06:30:39.000Z