PT-2026-38303

🗓️ 06 May 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 9 Views

Windows backslash traversal bypasses template checks, enabling access to files outside template directory.

Reporter	Title	Published	Views	Family All 135
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in Python wheel package for the aiohttp library affecting watsonx Code Assistant On Prem Extensions	27 Mar 202515:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite Predict Component uses CVE-2024-52304 (Low) detected in aiohttp-3.9.2-cp39-cp39-manylinux_2_17_x86_64.manylinux2014_x86_64.whl which is vulnerable to CVE-2024-52304	20 Feb 202506:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite Ai-Broker Component uses CVE-2024-52304 aiohttp-3.10.2-cp310-cp310-macosx_10_9_universal2.whl (Publicly disclosed vulnerability found by Mend) CVE-2024-52304	28 Jan 202521:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in aiohttp affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	14 May 202519:21	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	27 May 202616:03	–	ibm
GithubExploit	dependabot-pip-mako-case-poc	20 May 202614:59	–	githubexploit
Tenable Nessus	aioHTTP < 3.10.11 Request Smuggling	20 Nov 202400:00	–	nessus
Tenable Nessus	Debian dla-4041 : python-aiohttp-doc - security update	3 Feb 202500:00	–	nessus
Tenable Nessus	Debian dsa-5828 : python-aiohttp-doc - security update	11 Dec 202400:00	–	nessus

Source	Link
osv	www.osv.dev/vulnerability/CVE-2026-34516
osv	www.osv.dev/vulnerability/CVE-2026-41066
osv	www.osv.dev/vulnerability/CVE-2026-34514
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-58065
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-32962
osv	www.osv.dev/vulnerability/CVE-2026-34520
osv	www.osv.dev/vulnerability/CVE-2025-69226
osv	www.osv.dev/vulnerability/CLEANSTART-2026-CR27895
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-NM83456.json
osv	www.osv.dev/vulnerability/CVE-2024-56326

11 Jun 2026 00:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5 - 9.8

CVSS 48.7

EPSS0.00609

SSVC