EUVD-2026-112565

In openEQUELLA before 2026.1, the SOAP API parses XML supplied in the stopEdit operation with a parser that resolves external entities. This allows an attacker to read arbitrary files accessible to the openEQUELLA service or cause the server to issue requests to attacker-specified locations SSRF...

CVE-2026-66089 XML External Entity (XXE) Vulnerability in SOAP Interface Allows External Entity Expansion

In openEQUELLA before 2026.1, the SOAP API parses XML supplied in the stopEdit operation with a parser that resolves external entities. This allows an attacker to read arbitrary files accessible to the openEQUELLA service or cause the server to issue requests to attacker-specified locations SSRF...

CVE-2026-66089

The openEQUELLA software (versions prior to 2026.1 ) is vulnerable to an XML External Entity (XXE) injection flaw within its SOAP API . The issue occurs because the stopEdit operation uses an XML parser that resolves external entities. This allows an attacker to perform arbitrary file reads (file...

Echo Has A Static Middleware Double-Unescape Path Traversal

Summary Commit a9ede66a PR 3006, issue 2599 silently fixed a path traversal vulnerability in the Echo web framework's static file middleware. Vulnerability The static middleware double-unescaped URL paths. Go's net/http already decodes Request.URL.Path, but middleware/static.go unconditionally...

CVE-2026-113617: Unknown Automated Import Products to Cart: The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before…

The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before using it to read and delete files, allowing users with minimal permissions, such as subscribers, to read arbitrary files including ones containing the database credentials and...

PT-2026-130612

In openEQUELLA before 2026.1, the XML parser used for item metadata does not disable external entity resolution. A user permitted to create items CREATE ITEM can submit crafted XML to POST /api/item and cause the server to read arbitrary files accessible to the openEQUELLA service, or make reques...

PT-2026-130645

The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before using it to read and delete files, allowing users with minimal permissions, such as subscribers, to read arbitrary files including ones containing the database credentials and...

CVE-2026-61645: docat-org docat: Docat is a tool for hosting versioned static documentation

Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vulnerability in the Upload API arises because the API does not validate the uploaded file path or type. An attacker can overwrite sensitive configuration files or place malicious...

PT-2026-132845

Name of the Vulnerable Software and Affected Versions Docat versions prior to 1.6.0 Description An arbitrary file upload issue exists in the Upload API because the system fails to validate the uploaded file path or type. This allows authenticated users to overwrite sensitive configuration files o...

Apache Ambari 3.0.0 MpackManager Path Traversal

Apache Ambari version 3.0.0 MpackManager contains a path traversal vulnerability that allows an authenticated administrator to write arbitrary files outside the management-pack staging directory. !/usr/bin/env python Apache Ambari 3.0.0 MpackManager Path Traversal Arbitrary File Write Vendor: The...

CVE-2026-107053

Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage space outside of the sandbox...

CVE-2026-107055

Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files...

CVE-2026-66089: Apereo Foundation openEQUELLA: In openEQUELLA before 2026.1, the SOAP API parses XML supplied in the stopEdit operation with a parser that resolves…

In openEQUELLA before 2026.1, the SOAP API parses XML supplied in the stopEdit operation with a parser that resolves external entities. This allows an attacker to read arbitrary files accessible to the openEQUELLA service or cause the server to issue requests to attacker-specified locations SSRF...

CVE-2026-77819: IBM Langflow OSS: IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to…

IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to improper limitation of a pathname to a restricted directory...

CVE-2026-107053

The foobnix Librera PDF Reader (versionCode 7222 ) contains a vulnerability due to insecure permissions . This flaw allows unauthorized attackers to arbitrarily write and truncate files within a shared storage space located outside of the application's sandbox. Specific details regarding exploita...

Alibaba Cloud Linux 3 : 0323: rsync (ALINUX3-SA-2026:0323)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0323 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-53783: rsync before3.5.0 contains...

RockyLinux 9 : podman (RLSA-2026:90362)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:90362 advisory. podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HTTP Range headers...

Safir input validation error vulnerability in the National Accounting Office

The input validation error vulnerability exists in Szafir 2.0.0 and earlier versions, as well as Szafir Weryfikująca 1.0 and earlier versions. This vulnerability stems from the parser’s handling of external entities when processing specially crafted XML files containing external DTD references to...

PT-2026-130648

Name of the Vulnerable Software and Affected Versions Chat AI with Dispatcher versions prior to 2.4 Description An issue exists where uploaded files are not properly validated, as the system relies solely on a spoofable client-supplied content type. This allows unauthenticated attackers to upload...

PT-2026-132865

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 27.2 Description An app may be able to read arbitrary files due to improper handling of symlinks symbolic links, which are files that point to another file or directory on the system. Recommendations Update to Xcode...