CVE-2026-28676

creationtimestamp| type| source ---|---|--- 2026-03-06 06:20:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgeoajsm3l27 2026-03-06 08:07:12+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mgeu75lg5x2c 2026-03-06 08:09:33+00:00| seen|...

CVE-2026-28676

OpenSift (before version 1.6.3-alpha) has a path-construction defect in multiple storage helpers that failed to consistently enforce base-directory containment for file read/write/delete operations, creating a path-injection risk. CVSS 3.1 base score 8.8 (HIGH) with network attack vector, low att...