Roadiz is a polymorphic content management system based on a node system that can handle many types of services.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. Mar 26, 2026 · NIST NVD

   Detected

   Roadiz is a polymorphic content management system based on a node system that can handle many types of services. A vulnerability in roadiz/documents prior to versions 2.7.9, 2.6.28, 2.5.44, and 2.3.42 allows an authenticated attacker to read any file on the server's local file system that the web server process has access to, including highly sensitive environment variables, database credentials,

2. Jun 17, 2026 · NIST NVD

   Updated

   Roadiz is a polymorphic content management system based on a node system that can handle many types of services. A vulnerability in roadiz/documents prior to versions 2.7.9, 2.6.28, 2.5.44, and 2.3.42 allows an authenticated attacker to read any file on the server's local file system that the web server process has access to, including highly sensitive environment variables, database credentials,

Affected

• cpe roadiz/core-bundle-dev-appversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-33486

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-33486

  Roadiz is a polymorphic content management system based on a node system that can handle many types of services. A vulnerability in roadiz/documents prior to versions 2.7.9, 2.6.28, 2.5.44, and 2.3.42 allows an authenticated attacker to read any file on the server's local file sy

  nvd.nist.gov

References

• Patch · github.com
• Exploit · github.com