Dynamicweb 9.20.x Remote Code Execution | Tenable®

Family : Component Vulnerability

Published : 10/28/2026

Scan Template : basic , full , pci , quick , scan

Vector : CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source : CVE-2026-2731

Risk Factor : Critical

Vector : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS Score Source : CVE-2026-2731

Risk Factor : Critical

Vector : CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

CVSS Score Source : CVE-2026-2731

Vulnerability Information

CPE : cpe:2.3:a:dynamicweb:dynamicweb:*:*:*:*:*:*:*:*

Exploit Ease : No known exploits are available

Vulnerability Publication Date : 2/18/2026

Reference Information

OWASP : 2010-A4 , 2013-A4 , 2013-A9 , 2017-A5 , 2017-A9 , 2021-A1 , 2021-A6 , 2025-A1 , 2025-A6

WASC : Path Traversal

CAPEC : 126 , 64 , 76 , 78 , 79

DISA STIG : APSC-DV-002560 , APSC-DV-002630

HIPAA : 164.306(a)(1) , 164.306(a)(2)

NIST : sp800_53-CM-6b , sp800_53-SI-10

OWASP API : 2019-API7 , 2023-API8

OWASP ASVS : 4.0.2-12.3.1 , 4.0.2-14.2.1

PCI-DSS : 3.2-6.2 , 3.2-6.5.8