PT-2026-64998

phpMyFAQ before 4.1.6 fails to validate path traversal sequences in the existing image field during category updates, allowing authenticated attackers to delete arbitrary files by exploiting insufficient sanitization in Image::delete. Attackers can delete the database.php configuration file to...

PT-2026-65109

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location...

PT-2026-64959

NitroShare Desktop through 0.3.4 contains a path traversal vulnerability in its LAN file transfer server that allows unauthenticated attackers on the same network to write arbitrary files by sending a crafted filename containing directory traversal sequences in the JSON item header name field...

RollerCoaster

RollerCoaster: Advanced Exploitation of Cisco ASA LINA Firmwar...

Exploit for CVE-2026-65694

CVE-2026-65694 — Microweber CMS Unauthenticated Arbitrary File...

SUSE SLED15 / SLES15 Security Update : net-tools (SUSE-SU-2026:3223-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:3223-1 advisory. - CVE-2024-58251: denial of service via terminal escape sequences bsc1254323. Tenable has extracted the preceding...

openSUSE 16 Security Update : apache-ivy (openSUSE-SU-2026:21424-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21424-1 advisory. This update for apache-ivy fixes the following issue: - CVE-2026-26032: directory traversal sequences in module coordinates can allow overwriting...

Linux Distros Unpatched Vulnerability : CVE-2026-65914

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - DOMPurify before 3.3.2 contains a mutation-XSS vulnerability when sanitized HTML is reinserted into special parsing contexts using innerHTML with wrappers like...

openSUSE 16 Security Update : net-tools (openSUSE-SU-2026:21429-1)

The remote openSUSE 16 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2026:21429-1 advisory. This update for net-tools fixes the following issue: - CVE-2024-58251: denial of service via terminal escape sequences bsc1254323. Tenable has extracted...

SUSE SLES12 Security Update : net-tools (SUSE-SU-2026:3222-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2026:3222-1 advisory. - CVE-2024-58251: denial of service via terminal escape sequences bsc1254323. Tenable has extracted the preceding description block directly from the...

Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data

Summary Oh My Posh renders dynamic, potentially attacker-controlled strings the current directory name, Git commit metadata, environment variable values, command output into the prompt without neutralizing raw terminal control characters. An attacker who controls one of these values can inject...

GHSA-FWJX-9P69-H25H Oh My Posh: Terminal escape sequence injection via unsanitized prompt segment data

Summary Oh My Posh renders dynamic, potentially attacker-controlled strings the current directory name, Git commit metadata, environment variable values, command output into the prompt without neutralizing raw terminal control characters. An attacker who controls one of these values can inject...

Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-12143)

Summary IBM Security SOAR uses an older version of the form-data component that may be identified and exploited. Updates for supported versions have been released which address the issue. It is recommended to upgrade to version 51.0.10.2 Vulnerability Details CVEID:CVE-2026-12143 DESCRIPTION:...

Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-44486, CVE-2026-44487, CVE-2026-44488, CVE-2026-44489, CVE-2026-44490, CVE-2026-44492, CVE-2026-44494, CVE-2026-44496)

Summary IBM Security SOAR uses an older version of the axios component that may be identified and exploited. Updates for supported versions have been released which address the issue. It is recommended to upgrade to version 51.0.10.2 Vulnerability Details CVEID:CVE-2026-44486 DESCRIPTION: Axios i...

PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path

Summary The b64 extension inlines images referenced by as base64 data URIs. When resolving the src path it joins it onto the configured basepath with os.path.normpath and opens the result directly, with no check that the resolved path stays inside basepath. A src containing ../ sequences, or an...

GHSA-9XWG-3R6F-JCX2 PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path

Summary The b64 extension inlines images referenced by as base64 data URIs. When resolving the src path it joins it onto the configured basepath with os.path.normpath and opens the result directly, with no check that the resolved path stays inside basepath. A src containing ../ sequences, or an...

CVE-2026-66007

Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the filename metadata field is not properly validated before being joined to the dataset directory. Attackers can supply crafted filename values with directory traversal...

CVE-2026-66004

BlenderMCP before commit 30a3308 contains a path traversal vulnerability in the downloadpolyhavenasset method that allows attackers to write arbitrary files by injecting traversal sequences in API response include keys. Attackers performing MITM attacks or prompt injection can supply malicious...

CVE-2026-66007 Datasets Path Traversal via Unsanitized file_name Metadata

Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the filename metadata field is not properly validated before being joined to the dataset directory. Attackers can supply crafted filename values with directory traversal...

CVE-2026-66007

Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the filename metadata field is not properly validated before being joined to the dataset directory. Attackers can supply crafted filename values with directory traversal...