CVE-2026-3602: External Control of File Name or Path

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A remote attacker could socially engineer a user into accidentally creating files they may not be aware of...

CVE-2026-47214: External Control of File Name or Path

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0...

CVE-2026-47643: External Control of File Name or Path

External control of file name or path in Azure Stack Edge allows an unauthorized attacker to execute code over a network...

CVE-2026-40370: External Control of File Name or Path

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-41107: External Control of File Name or Path

External control of file name or path in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

CVE-2026-32204: External Control of File Name or Path

External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

CVE-2025-65115: External Control of File Name or Path

Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management - Manager on Windows, Job Management Partner 1/IT...

CVE-2026-30903: External Control of File Name or Path

External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2026-26359: External Control of File Name or Path

Dell Unisphere for PowerMax, versions 10.2, contains an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the ability to overwrite arbitrary files...

CVE-2026-26361: External Control of File Name or Path

Dell Unisphere for PowerMax, versions 10.2, contains an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-26360: External Control of File Name or Path

Dell Unisphere for PowerMax, versions 10.2, contains an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability to delete arbitrary files...

CVE-2026-21249: External Control of File Name or Path

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally...

CVE-2026-20872: External Control of File Name or Path

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-66003: External Control of File Name or Path

An External Control of File Name or Path vulnerability in smb4k allowsl ocal users to perform a local root exploit via smb4k mounthelper if they can access and control the contents of a Samba shareThis issue affects smb4k: from ? before 4.0.5...

CVE-2025-64739: External Control of File Name or Path

External control of file name or path in certain Zoom Clients may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2025-8998: External Control of File Name or Path

It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account...

CVE-2025-20614: External Control of File Name or Path

External control of file name or path for some IntelR CIP software before version WINDCA2.4.0.11001 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with a privileged user combined with a low complexity attack may enable escalation of privileg...

CVE-2025-59511: External Control of File Name or Path

External control of file name or path in Windows WLAN Service allows an authorized attacker to elevate privileges locally...

PT-2025-42921

Name of the Vulnerable Software and Affected Versions opentext Flipper version 3.1.2 Description An issue exists in opentext Flipper that allows for Path Traversal due to External Control of File Name or Path. This could allow a user to access files hosted on the server. Recommendations At the...

CVE-2025-59483: External Control of File Name or Path

A validation vulnerability exists in an undisclosed URL in the Configuration utility. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...