PatchTheCVECVE-2022-26233: Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traver
CVE-2022-26233 is a high-severity flaw (CVSS 7.5) affecting control room management suite. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components. Requests must begin with the "GET /..\.." substring.
Why this priority
- High severity
- EPSS top 3%: very likely to be exploited
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Risk facts
| CVSS score | 7.5 (High) |
| Attack vector | Network (remote) |
| Attack complexity | Low |
| Privileges needed | None |
| User interaction | None |
| EPSS exploit chance | 15.0% (top 3%) |
| CISA exploited list | No |
| Weakness | CWE-22 |
| Published | 2022-04-03 |
| Last modified | 2026-06-17 |
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Public exploits and detection
Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.
- Nuclei scan template: Barco Control Room Management Suite <=2.9 Build 0275 - Local File Inclusion
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2022-26233?
control room management suite: upgrade to newer than 2.9. Exact commands for each OS are on this page.
Is CVE-2022-26233 being exploited?
CVE-2022-26233 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2022-26233 affect?
CVE-2022-26233 affects control room management suite. Severity is high (CVSS 7.5). Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components. Requests must begin with the "GET /..\.." substring.
How urgent is CVE-2022-26233?
Priority 60/100. High severity; EPSS top 3%: very likely to be exploited; Public exploit reference; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2022-26978 MEDIUM 6.1 UPGRADE Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a U
- CVE-2022-26977 MEDIUM 6.1 UPGRADE Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a l
- CVE-2022-26976 MEDIUM 5.4 UPGRADE Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a l
- CVE-2022-26975 HIGH 7.5 UPGRADE Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log
- CVE-2022-26974 MEDIUM 6.1 UPGRADE Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a f