CVE-2026-30278

Critical · CVSS 9.8

FLY is FUN Aviation Navigation — Path Traversal Arbitrary File Overwrite (CWE-22)

CVSS: 9.8; nvd
EPSS: —
KEV: No
Class: other; CWE-22

Description

An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

Search profile — drives PoC discovery

Symbols file import processarbitrary file overwritecritical internal filesfile importpath traversal

Keywords CVE-2026-30278FLY is FUN Aviation Navigationarbitrary file overwritepath traversalfile importv35.33PoCexploitCWE-22

Versions: v35.33

References

http://www.funair.cz/forum
https://secsys.fudan.edu.cn/

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-06T06:30:39.000Z