PT-2026-132865

Name of the Vulnerable Software and Affected Versions Xcode versions prior to 27.2 Description An app may be able to read arbitrary files due to improper handling of symlinks symbolic links, which are files that point to another file or directory on the system. Recommendations Update to Xcode...

CVE-2026-107018

Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read and write files inside the commander's private storage...

OpenEQUELLA input validation error vulnerability

Versions of openEQUELLA prior to 2026.1 contain an input validation error vulnerability. This flaw arises because the XML parser used for project metadata fails to disable external entity resolution. Users with project creation privileges can submit specially crafted XML via POST /api/item,...

OpenEQUELLA input validation error vulnerability

Versions of openEQUELLA prior to 2026.1 contain an input validation error vulnerability. This vulnerability arises because the SOAP API uses an XML parser capable of parsing external entities during the stopEdit operation; it may allow attackers to read any file accessible to the service or cause...

RockyLinux 9 : skopeo (RLSA-2026:90462)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:90462 advisory. podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HTTP Range headers...

Jenkins 2.441 Arbitrary File Read

Jenkins version 2.441 and earlier contains an arbitrary file read vulnerability in CLI argument expansion. The included proof of concept demonstrates unauthenticated disclosure through the Jenkins CLI. https://packetstorm.news/download/238176...

Apache Camel 4.22.1 Docling Output Path Traversal

Apache Camel version 4.22.1 camel-docling passes the CamelDoclingOutputFilePath header directly to Docling's output-directory option, allowing conversion output to be written to an attacker-selected writable directory. The supplied proof of concept demonstrates the issue in Spring Boot and Quarku...

CVE-2026-119198: nuxt: Nuxt is an open-source web development framework for Vue.js

Nuxt is an open-source web development framework for Vue.js. From 4.6.0 until 4.6.3, a client with TCP access to an exposed Nuxt development server can send a nuxt:dev:client-error event over the HMR socket with an absolute file path at the end of its message. The development server reads that fi...

CVE-2026-107053: n/a: Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write…

Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage space outside of the sandbox...

EUVD-2026-113260

Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage space outside of the sandbox...

CVE-2026-107018: n/a: Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read…

Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read and write files inside the commander's private storage...

CVE-2026-103693: Unknown: The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an…

The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that can lead to...

PT-2026-132208

IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive containing entry paths that traverse outside the intended extraction directory. Extraction of the archive by a victim using a non-sanitizing tool could result in arbitrary file...

EUVD-2026-112931

Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read and write files inside the commander's private storage...

openEQUELLA arbitrary file upload vulnerability

Versions of openEQUELLA prior to 2026.1 contain an arbitrary file upload vulnerability. This vulnerability arises because the image upload endpoint PUT /api/preloginnotice/image/name is not validated for file types prior to login; the Content-Type is set based on the filename. Users with...

RHEL 9 : skopeo (RHSA-2026:90462)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90462 advisory. The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and...

CVE-2026-107055

Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files...

PT-2026-130634

The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that can lead to...

RHEL 9 : buildah (RHSA-2026:90424)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90424 advisory. The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a...

CVE-2026-66090: Apereo Foundation openEQUELLA: In openEQUELLA before 2026.1, the XML parser used for item metadata does not disable external entity resolution

In openEQUELLA before 2026.1, the XML parser used for item metadata does not disable external entity resolution. A user permitted to create items CREATEITEM can submit crafted XML to POST /api/item and cause the server to read arbitrary files accessible to the openEQUELLA service, or make request...