CVE-2026-1020

Medium · 5.3

CVSS

5.3

EPSS

0.5%

Published

Jan 16, 2026

CISA due date

—

The record

Police Statistics Database System developed by Gotac has a Absolute Path Traversal vulnerability, allowing unauthenticated remote attackers to enumerate the system file directory.

Affected packages

Ecosystem	Package	Introduced	Fixed