Paper/Archive/CVE-2026-73642

CVE-2026-73642

Dayforce ESS Excelity — Path Traversal in Dayforce ESS Excelity

CVSS 9.2 (CNA)9.2 / 10 × 3027.6 Not in CISA KEV+300.0 EPSS percentile 36.7.367 × 207.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Dayforce ESS Excelity is vulnerable to Path Traversal in file download functionality. An unauthenticated attacker can sent GET request with file path parameter set to any path including an absolute local file path. This issue was fixed in version V4.

Affected

ProductAffectedFixed inSource

ESS Excelity< V4V4CNA

Scores by source

CERT-PL (CNA)9.2CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

writeupcert.pl/en/posts/2026/09/CVE-2026-73640 refhcm.excelityglobal.com/ESS