SUSE CVE-2026-92066

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

GO-2026-6366 Path traversal via crafted backup part names escapes restore root in github.com/VictoriaMetrics/VictoriaMetrics

Path traversal via crafted backup part names escapes restore root in github.com/VictoriaMetrics/VictoriaMetrics...

CVE-2026-92066

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92066

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

UBUNTU-CVE-2026-92066

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92066 Sandbox escape in the Profile Backup component

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92066 Sandbox escape in the Profile Backup component

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92066

A sandbox escape vulnerability exists in the Profile Backup component of Firefox and Thunderbird . The vulnerability was addressed in Firefox 156 and Thunderbird 156 . While specific root cause technical details are not provided in the documents, the impact involves a potential escape from the ap...

EUVD-2026-78529

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92066

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

CVE-2026-92066

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

EUVD-2026-79298

Bacularis 1.0.0 - 6.5.0 is vulnerable to Stored cross-site scripting XSS in the client address field...

PT-2026-92002

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 156 Thunderbird versions prior to 156 Description A sandbox escape exists in the Profile Backup component. A sandbox is a security mechanism for separating running programs, ensuring that code executes in a restricted...

CVE-2026-92066: Protection Mechanism Failure

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 156 and Thunderbird 156...

VulnCheck KEV: CVE-2026-87886

Acronis Backup plugin for cPanel & WHM and extension for Plesk contains an incorrect default permissions vulnerability that could allow for privilege escalation...

rsync: rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink

A path traversal and symlink vulnerability in rsync allows a malicious sender with write access to write files outside the intended directory. By exploiting symbolic links in conjunction with the --partial-dir or --backup-dir options, an attacker can bypass path restrictions to modify arbitrary...

rsync: rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink

A path traversal and symlink vulnerability in rsync allows a malicious sender with write access to write files outside the intended directory. By exploiting symbolic links in conjunction with the --partial-dir or --backup-dir options, an attacker can bypass path restrictions to modify arbitrary...

CVE-2026-90932

LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService e.g. BackupService::deleteBackup concatenate the user-supplied backupfile/filename value directly onto the backup directory path without...

CVE-2026-90932 LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE

LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService e.g. BackupService::deleteBackup concatenate the user-supplied backupfile/filename value directly onto the backup directory path without...

EUVD-2026-77450

LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService e.g. BackupService::deleteBackup concatenate the user-supplied backupfile/filename value directly onto the backup directory path without...