PT-2026-126684

Name of the Vulnerable Software and Affected Versions systeminformation versions prior to 5.33.14 Description The Linux implementation of the networkStatsiface function fails to properly validate the iface variable when performing an fs.existsSync check and constructing paths under /sys/class/net...

PT-2026-127223

Name of the Vulnerable Software and Affected Versions MLflow versions 3.10.0 through 3.16.1 Description An issue exists where a remote caller can read arbitrary files from the server filesystem with the privileges of the server process. This occurs because the prompt branch in the create model...

PT-2026-126658

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

PT-2026-127254

GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the database restoration feature fails to enforce or validate file paths. A user with administrator privileges can manipulate the input to read or delete arbitrary files on the server,...

PT-2026-126648

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service...

Oracle Linux 9 : buildah (ELSA-2026-90424)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-90424 advisory. - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Update to buildah 1.43.4 c7061d00 - fix CVE-2026-56855 golang.org/x/crypto/ssh DoS and CVE-2025-113...

CVE-2026-106077: Incorrect Authorization

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges...

VulnCheck KEV: CVE-2024-3848

A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '' character can be used to insert a path into the fragment, effectively...

PT-2026-125895

This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role...

PT-2026-127859

Name of the Vulnerable Software and Affected Versions Contact Manager versions prior to 9.1.3 Description An arbitrary file upload issue exists in the add message function. This occurs because an incomplete extension blacklist fails to detect dangerous extensions when a trailing dot causes the...

CentOS Linux 8 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS-STREAM8:CLSA-2026:1793098806)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1793098806 advisory. - rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destinati...

Hitachi Energy TRO600 Series Firmware authorization issue vulnerability

Versions 9.0.0.0 through 9.1.1.0 of the Hitachi Energy TRO600 Series firmware contain an authorization issue vulnerability. This vulnerability stems from an arbitrary file read flaw, which allows unauthenticated attackers to read or download any files on affected devices, including sensitive...

Linux Distros Unpatched Vulnerability : CVE-2026-116612

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in GStreamer Editing Services gst-editing-services. A GES project file can embed an arbitrary GStreamer pipeline description as an effect...

CentOS Linux 8.4 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS8.4:CLSA-2026:1793098772)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1793098772 advisory. - rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination...

CVE-2026-108140: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

buildah security update

1.43.4-2.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.43.4-2 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-279009 - Resolves: RHEL-287507 2:1.43.4-1 - Update to buildah 1.43.4 c7061d00 - fix CVE-2026-56855 golang.org/x/crypto/ssh DoS a...

Hitachi Energy RTU500 Relative Path Traversal (CVE-2026-8066)

A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in unauthorized modification of...

RockyLinux 9 : lrzsz (RLSA-2026:89755)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89755 advisory. lrzsz: lrzsz: Arbitrary file overwrite via absolute path traversal in restricted mode CVE-2026-105840 lrzsz: lrzsz: Arbitrary command execution via...

PT-2026-126654

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges...

RockyLinux 10 : flatpak (RLSA-2026:89849)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89849 advisory. flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitrary...