POC-CVE-2026-19679

CVE-2026-19679 — insufficient sanitization of uploaded filenames input validation Status: CONFIRMED on a 6.7.2-14.el9 lab 2026-08-20. POST /rest/auditFile with tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml" returned HTTP 200 and registered AuditFile 1000002 — the shell-metachar filena...

CVE-2026-19679

creationtimestamp| type| source ---|---|--- 2026-08-20 20:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mtk3xuwcze2c 2026-08-24 13:00:02+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/99482 2026-08-25 00:00:23+00:00| published-proof-of-concept|...

CVE-2026-19679

An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue...