CVE-2026-30278

critical · 9.8

An arbitrary file overwrite vulnerability in FLY is FUN Aviation Navigation v35.33 allows attackers to overwrite critical internal files via the file import process, leading to arbitrary code execution or information exposure.

9.8

CVSS

0.5%

EPSS (exploit prob.)

44th

EPSS percentile

2026-03-31

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-22

Affected products

Vendor	Product	Affected versions
funair	fly_is_fun	35.33

Check a specific version with /api/v1/cve/match.

References

http://www.funair.cz/forum
https://secsys.fudan.edu.cn/

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2026-30278