PT-2026-4841

🗓️ 25 Jan 2026 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 1 Views

Python-Multipart path traversal before 0.0.22 lets arbitrary file writes via KEEP FILENAME; upgrade to 0.0.22 or disable KEEP FILENAME.

Reporter	Title	Published	Views	Family All 148
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which is vulnerable to multiple CVEs.	31 Mar 202613:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant Cartridge	18 May 202607:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx.data integration has several vulnerabilities due to open source packages (CVE-2026-24486,CVE-2025-50537,CVE-2026-24688)	20 Mar 202616:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service due to [CVE-2023-24762]	7 Mar 202415:31	–	ibm
IBM Security Bulletins	Security Bulletin: Platform Navigator in IBM Cloud Pak for Integration is vulnerable to vulnerability in python_multipart	10 Apr 202608:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Security QRadar EDR Software	2 Jun 202608:49	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Suite Software includes components with multiple known vulnerabilities	1 Mar 202419:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands that use mapping assistance are vulnerable to denial of service [CVE-2024-53981]	28 Jan 202522:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses python_multipart-0.0.21-py3-none-any.whl which is vulnerable to CVE-2026-24486	6 Apr 202610:57	–	ibm

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2026-24486
ubuntu	www.ubuntu.com/security/CVE-2026-24486
twitter	www.twitter.com/CVEnew/status/2015988787575210118
ubuntu	www.ubuntu.com/security/CVE-2024-53981
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/24xxx/CVE-2026-24486.json
twitter	www.twitter.com/VulmonFeeds/status/2015995127144005716
twitter	www.twitter.com/TheHackerWire/status/2015960707175772345
twitter	www.twitter.com/CveFindCom/status/2016132817478905928
osv	www.osv.dev/vulnerability/CVE-2026-24486
osv	www.osv.dev/vulnerability/GHSA-wp53-j4wj-2cfg

11 Feb 2026 00:00Current

8.3High risk

Vulners AI Score8.3

CVSS 29

CVSS 3.17.5 - 8.6

EPSS0.03333

SSVC