CVE-2020-26037

CRITICAL 9.8CVE-2020-26037 · Published 16/08/2023 · updated 09/07/2026

In short

CVE-2020-26037 is a CRITICAL (CVSS 9.8) vulnerability affecting punkbuster (evenbalance).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.6% of all vulnerabilities.
Fix: update to 1.905 or later.

Package	Affected versions	Patched versions
punkbuster evenbalance	`≥ 1.902, < 1.905`	`1.905`

Description

Directory Traversal vulnerability in Server functionalty in Even Balance Punkbuster version 1.902 before 1.905 allows remote attackers to execute arbitrary code.

References

medium.com/@prizmant/hacking-punkbuster-e22e6cf2f36e
medium.com/%40prizmant/hacking-punkbuster-e22e6cf2f36e

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free