CVE-2026-58372

A flaw was found in SeaweedFS. An authenticated remote attacker with write access to a single bucket could exploit a path traversal vulnerability in the S3 gateway. By crafting a DeleteObjects XML request body with specific object keys containing directory traversal sequences, the attacker could...

CVE-2026-56250 Capgo - Arbitrary R2 Object Deletion via Mutable r2_path in app_versions

Capgo before 12.128.2 allows upload-scoped API keys to modify the mutable appversions.r2path field through PostgREST, enabling retargeting to arbitrary R2 bundle objects. Attackers can patch r2path to point to victim objects, soft-delete the attacker-controlled version, and trigger the...

NetApp StorageGRID Webscale Arbitrary Object Deletion Vulnerability

NetApp StorageGRID Webscale is a suite of scalable object storage software from American NetApp. A security vulnerability exists in NetApp StorageGRID Webscale, which allows remote attackers to exploit the vulnerability to commit special deletion of arbitrary objects...

PT-2017-12548

Name of the Vulnerable Software and Affected Versions NetApp StorageGRID Webscale versions 10.2.x through 10.2.2.2 NetApp StorageGRID Webscale versions 10.3.x through 10.3.0.3 NetApp StorageGRID Webscale versions 10.4.x through 10.4.0.1 Description The issue allows remote authenticated users to...