CVE-2026-54134: External Control of File Name or Path

OctoPrint provides a web interface for controlling consumer 3D printers. Prior to 1.11.8 and 2.0.0rc3, OctoPrint's custom Tornado upload handler and Flask with Werkzeug parse request parameters differently, allowing an attacker with FILEUPLOAD permission to inject reserved internal upload fields...

CVE-2026-76158: External Control of File Name or Path

External Control of File Name or Path in the upload API endpoint of Datiphy Data Management Center from v8.3.0 through v8.5.1 allows a remote attacker to write files to arbitrary locations outside the intended upload directory via relative or absolute path sequences...

CVE-2026-49441: External Control of File Name or Path

Wazuh is a free and open source platform used for threat prevention, detection, and response. From 4.3.0 until 4.14.6 and 5.0.0-beta3, the non-merged branch of processfilesfromworker in framework/wazuh/core/cluster/master.py trusts a peer-controlled filepath key from filesmetadata.json. The...

CVE-2026-18751: External Control of File Name or Path

External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607...

CVE-2026-67920: External Control of File Name or Path

An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl.MigrationServiceImpl.restoreWorkdir, and org.springframework.util.FileSystemUtils.copyRecursively components...

CVE-2026-34492: External Control of File Name or Path

External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation. This issue affects Airwall: before 4.1...

CVE-2026-17184: External Control of File Name or Path

IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control of file name or path...

EUVD-2026-56157

External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote authenticated attacker full write control over an S3 bucket configured for session recording storage...

CVE-2026-18127

CVE-2026-18127 affects Ivanti Endpoint Manager core prior to 2024 SU7. An authenticated, network-accessible attacker can externally control a filename in the Core, enabling full write access to an S3 bucket used for session-recording storage. The CVSS score is 7.7 (HIGH); attack requires low priv...

CVE-2026-18806: External Control of File Name or Path

External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 0.9.0...

PT-2026-67703

Name of the Vulnerable Software and Affected Versions pardus-image-writer versions prior to 1.0.4 Description An external control of file name or path issue exists in the software, which could allow an attacker to remove important client functionality. Recommendations Update pardus-image-writer t...

CVE-2026-65802: External Control of File Name or Path

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network...

CVE-2026-66310: External Control of File Name or Path

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally...

CVE-2026-64816: External Control of File Name or Path

RapidRAW before 1.6.0 does not validate the lutPath field in preset files before passing it to File::open in lutprocessing.rs. On Windows, a UNC path in lutPath causes an outbound SMB connection to an attacker-controlled host, leaking the victim's NTLMv2 credentials. The vulnerable code path is...

External Control of File Name or Path

Overview Affected versions of this package are vulnerable to External Control of File Name or Path via the handling of grammar directives such as %output and %header. An attacker can overwrite arbitrary files accessible to the process by supplying a crafted grammar that specifies output paths to...

CVE-2026-50462: External Control of File Name or Path

External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-54108: External Control of File Name or Path

External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-58293: External Control of File Name or Path

External control of file name or path in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-8921: External Control of File Name or Path

External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user to execute arbitrary code with SYSTEM privileges via a tampered IPC message. Refer to the ' Security Update for ASUS Business Manager ' section on the ASUS Security Advisory for more information...

CVE-2026-3602: External Control of File Name or Path

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A remote attacker could socially engineer a user into accidentally creating files they may not be aware of...