PT-2026-68328

🗓️ 05 Aug 2026 00:00:00Reported by Positive TechnologiesType

Path traversal in rclone 1.40.0-1.74.0 serve restic lets attackers read, create, overwrite, or delete files outside the configured path.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Vulnerabilities in golang.org/x/crypto bundled with IBM Fusion and IBM Fusion HCI.	5 Oct 202619:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in golang.org/x/mod bundled with IBM Fusion and IBM Fusion HCI	2 Oct 202618:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL	20 Aug 202623:55	–	ibm
IBM Security Bulletins	Security Bulletin: Due to use of Golang Go, multiple vulnerabilities affect IBM Cloud Pak System	7 Oct 202623:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for September 2026.	12 Oct 202622:55	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability jackson-databind, golang.org/x/mod, image-size, bcprov-jdk18on, bcpkix-jdk18on, pyasn, setuptools, Mako, paramiko, http2-common Oct 2026v1	6 Oct 202615:07	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability in Golang affects IBM Robotic Process Automation for Cloud Pak	9 Oct 202613:27	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL	24 Jul 202622:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses golang.org/x/crypto-v0.45.0 which is vulnerable to multiple vulnerabilities	3 Aug 202608:33	–	ibm
GithubExploit	Exploit for CVE-2026-71557	8 Aug 202601:52	–	githubexploit

Source	Link
suse	www.suse.com/security/cve/CVE-2026-65834
suse	www.suse.com/security/cve/CVE-2026-41181
suse	www.suse.com/security/cve/CVE-2026-53475
suse	www.suse.com/security/cve/CVE-2026-54910
suse	www.suse.com/security/cve/CVE-2026-56868
suse	www.suse.com/security/cve/CVE-2026-56871
suse	www.suse.com/security/cve/CVE-2026-56852
suse	www.suse.com/security/cve/CVE-2026-71479
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti-red-os-8-0/uyazvimost-rclone-cve-2026-71309--8.0
suse	www.suse.com/security/cve/CVE-2026-33818

01 Oct 2026 00:00Current

6.2Medium risk

Vulners AI Score6.2

CVSS 48.6 - 9.2

CVSS 23.6

CVSS 3.19.1 - 9.9

CVSS 34.2

EPSS0.05299

SSVC