Directory Traversal in SIMOVE and SIPLANT Fleet Management

CVE-2026-67367 is a directory traversal vulnerability (CWE-23) affecting multiple versions of SIMOVE Fleetmanager and SIPLANT fleet management systems. The vulnerability exists in the file-serving endpoint of the embedded HTTP server, where insufficient validation of user-supplied input allows attackers to bypass intended directory restrictions. This impacts organizations using SIMOVE Fleetmanager V3.1 through V4.0 and SIPLANT V1.7 through V3.1 for fleet operations and management. With a CVSS score of 8.6, the vulnerability carries significant risk—attackers can read arbitrary files from affected systems, potentially exposing sensitive operational data, credentials, and system configurations critical to fleet management infrastructure.

While this CVE doesn't map to specific MITRE ATT&CK techniques, Casky's Claude-powered platform would identify the exploitation pattern through reconnaissance and credential access behaviors. Practitioners using Casky would observe attack signatures consistent with file system enumeration attempts, unusual directory traversal sequences (../ patterns) in HTTP request logs, and access attempts to system files outside normal application directories. The security skills mapped across Casky's 754 MITRE ATT&CK techniques would flag suspicious file access patterns and help practitioners distinguish legitimate fleet management operations from reconnaissance activity targeting sensitive configuration files or authentication data stored on vulnerable endpoints.