{"uuid": "6b7340ff-1cc0-4fc3-b473-d41e4e53010e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-31793", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/1514", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-31793\nGithub: https://github.com/xpgdgit/CVE-2022-31793\nDescribe: \ndo_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and NVG510 devices and Arris-derived BGW210 and BGW320 devices are affected.", "creation_timestamp": "2026-08-01T05:00:05.132275Z"}