NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-42598
Summary

Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers. From 2.4.0, to before 2.13.0, when requesting content from a Static Route, it was possible to request paths such as http://localhost:8080/c:/Windows/System32/drivers/etc/hosts and have the contents returned. This vulnerability is fixed in 2.13.0.

Publication Date May 15, 2026, 3:16 a.m.
Registration Date May 15, 2026, 4:25 a.m.
Last Update May 15, 2026, 3:27 a.m.
Related information, measures and tools
Common Vulnerabilities List