CVE-2026-47754

creationtimestamp| type| source ---|---|--- 2026-08-10 17:00:50+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msql7whmi22h 2026-08-10 18:09:18+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3msqp2ejjjz2z 2026-08-10 18:09:19+00:00| seen|...

CVE-2026-47754

CVE-2026-47754 affects Metacat 2.x (including 2.19.1) and all 1.x versions, with an unauthenticated path traversal in the archiveEntryName parameter of the action=read endpoint. The bug stems from ArchiveHandler.readArchiveEntry() concatenating user input into a filesystem path and a disabled has...