CVE-2026-11442

creationtimestamp| type| source ---|---|--- 2026-06-13 02:29:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mo57hw36py23 2026-06-24 10:10:47+00:00| seen| https://bsky.app/profile/deafnews-auto.bsky.social/post/3mozofgotei2m...

CVE-2026-11442

CVE-2026-11442 affects Allegra, via the exportReport method. The vulnerability arises from inadequate validation of a user-supplied path used in file operations, enabling an attacker to disclose sensitive information with the service account’s context. The CVE notes a directory traversal and info...