POC-CVE-2026-19679

CVE-2026-19679 — sanitización insuficiente de los nombres de archivo subidos validación de entrada Estado: CONFIRMADO en un laboratorio 6.7.2-14.el9 2026-08-20. POST /rest/auditFile con tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml" devolvió HTTP 200 y registró AuditFile 1000002: el...

CVE-2026-19679

creationtimestamp| type| source ---|---|--- 2026-08-20 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtk3xuwcze2c 2026-08-24 13:00:02+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99482 2026-08-25 00:00:23+00:00| published-proof-of-concept|...

CVE-2026-19679

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...