PT-2026-95979

Name of the Vulnerable Software and Affected Versions 00Kisumi00 mcp-file-analyzer versions up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405 Description A path traversal issue exists in the analyze csv data MCP tool within the ControlFlowNode function of the main.py file. This occurs when the...

CVE-2026-94049: Improper Limitation of a Pathname to a Restricted Directory

A flaw has been found in 06ketan slideshot up to 4.4.0. This impacts the function renderslides of the file packages/cli/src/renderer.ts. This manipulation of the argument htmlPath causes path traversal. The attack is possible to be carried out remotely. The exploit has been published and may be...

CVE-2026-94046: Improper Limitation of a Pathname to a Restricted Directory

A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8. The affected element is the function getfilesnippet of the file getFileSnippet.ts of the component MCP Tool. Executing a manipulation of the argument projectRootPath/filePath can lead to path traversal. The attack may be...

Linux Distros Unpatched Vulnerability : CVE-2026-93986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object...

Linux Distros Unpatched Vulnerability : CVE-2026-93987

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone versions 1.56.0 through 1.75.0 contain a path traversal vulnerability in the rclone serve docker volume plugin. newVolume in cmd/serve/docker/volume.go...

CVE-2026-93616: Directory Traversal and File upload allows execution of arbitrary script on the Management Server

Symptoms - A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on the Check Point Management Server. This vulnerability is exploited in the Wild. Check Point is aware of a handful of customers who have been attacked. This...

CVE-2026-93992

Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write arbitrary files outside the extraction directory. Attackers can craft malicious archives with entries containing directory traversal sequences that bypass validation, enabling...

CVE-2026-93988

QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. Attackers can supply relative path sequences in the email parameter to bypass directory restrictions and access sensitive...

CVE-2026-93992

Gopeed (a download manager) versions through 2.0.0-beta.3 contain a path traversal vulnerability in its archive extraction feature. Attackers can craft malicious archives whose entries include directory traversal sequences that bypass path validation. When a user downloads and extracts such an ar...

CVE-2026-93992 Gopeed through 2.0.0-beta.3 Arbitrary File Write via Path Traversal

Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write arbitrary files outside the extraction directory. Attackers can craft malicious archives with entries containing directory traversal sequences that bypass validation, enabling...

CVE-2026-93992 Gopeed through 2.0.0-beta.3 Arbitrary File Write via Path Traversal

Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write arbitrary files outside the extraction directory. Attackers can craft malicious archives with entries containing directory traversal sequences that bypass validation, enabling...

CVE-2026-93992 Gopeed through 2.0.0-beta.3 Arbitrary File Write via Path Traversal

Gopeed through 2.0.0-beta.3 contains a path traversal vulnerability in archive extraction that allows attackers to write arbitrary files outside the extraction directory. Attackers can craft malicious archives with entries containing directory traversal sequences that bypass validation, enabling...

CVE-2026-93988

QloApps versions through 1.7.0 contain a path traversal vulnerability in the getEmailHTML action of admin/ajax.php. An authenticated back-office user can supply relative path sequences in the email parameter to bypass directory restrictions and read arbitrary files , including database credential...

CVE-2026-93988 QloApps through 1.7.0 Arbitrary File Read via getEmailHTML

QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. Attackers can supply relative path sequences in the email parameter to bypass directory restrictions and access sensitive...

CVE-2026-93988 QloApps through 1.7.0 Arbitrary File Read via getEmailHTML

QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. Attackers can supply relative path sequences in the email parameter to bypass directory restrictions and access sensitive...

CVE-2026-93988 QloApps through 1.7.0 Arbitrary File Read via getEmailHTML

QloApps through 1.7.0 contains a path traversal vulnerability in the getEmailHTML action of admin/ajax.php that allows authenticated back-office users to read arbitrary files. Attackers can supply relative path sequences in the email parameter to bypass directory restrictions and access sensitive...

CVE-2026-85706

CVE-2026-85706 GitLab CE および EE における未認証のパストラバーサル / 任意ファイル読み取り。 CVSS 10.0。ローカルラボの自己管理型 19.3.1 インスタンスに対して検証済み。 影響を受けるバージョン GitLab CE/EE: 18.7 から 19.1.7 まで 19.2.0 から 19.2.5 まで 19.3.0 から 19.3.1 まで 前提条件: インスタンスに少なくとも 1 つの公開プロジェクトが存在すること。任意の実在するプロジェクト id で動作する。アカウントやトークンは不要。 仕組み create-commit エンドポイント...

CVE-2024-27954

CVE-2024-27954 📝 CVE-2024-27954 - WP Automatic プラグインにおけるパストラバーサルおよびSSRF脆弱性 説明 WP Automatic プラグインには、パス名の制限されたディレクトリへの不適切な制限（パストラバーサル） の脆弱性が存在し、パストラバーサル および サーバーサイドリクエストフォージェリ SSRF 攻撃を許します。この問題は、WP Automatic バージョン 3.92.0 までに影響します。 🔍 検出クエリ 影響を受けるホストを特定するには、以下のクエリを使用できます。 FOFA:...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the handling of directory listing responses. An attacker can write files outside the intended destination root by crafting object names containing forward slashes and parent directory references. Details A...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path through the newVolume process in the Docker volume plugin when the name field of a VolumeDriver.Create request is not properly validated. An attacker can cause the creation and mounting of a remote...