EUVD-2026-124719

Xiaomi Mi Browser Android Application com.mi.globalbrowser before 14.66.0-gn contains a path traversal vulnerability in the exported ThirdDocViewerActivity component, where CopyExternalFile.copyFromUri copies content provider streams using an unsanitized filename from the displayname column witho...

CVE-2026-127209

Xiaomi Mi Browser Android Application com.mi.globalbrowser before 14.66.0-gn contains a path traversal vulnerability in the exported ThirdDocViewerActivity component, where CopyExternalFile.copyFromUri copies content provider streams using an unsanitized filename from the displayname column witho...

CVE-2026-127209 Xiaomi Mi Browser < 14.66.0 Path Traversal via ThirdDocViewerActivity

Xiaomi Mi Browser Android Application com.mi.globalbrowser before 14.66.0-gn contains a path traversal vulnerability in the exported ThirdDocViewerActivity component, where CopyExternalFile.copyFromUri copies content provider streams using an unsanitized filename from the displayname column witho...

CVE-2026-127209

The Xiaomi Mi Browser Android Application (com.mi.globalbrowser) prior to version 14.66.0-gn is vulnerable to a path traversal vulnerability within the exported ThirdDocViewerActivity component. The root cause is that the CopyExternalFile.copyFromUri() function copies content provider streams usi...

CVE-2026-127209: Xiaomi Mi Browser (com.mi.globalbrowser): Xiaomi Mi Browser Android Application (com.mi.globalbrowser) before 14.66.0-gn contains a path traversal vulnerability…

Xiaomi Mi Browser Android Application com.mi.globalbrowser before 14.66.0-gn contains a path traversal vulnerability in the exported ThirdDocViewerActivity component, where CopyExternalFile.copyFromUri copies content provider streams using an unsanitized filename from the displayname column witho...

PT-2026-146061

Xiaomi Mi Browser Android Application com.mi.globalbrowser before 14.66.0-gn contains a path traversal vulnerability in the exported ThirdDocViewerActivity component, where CopyExternalFile.copyFromUri copies content provider streams using an unsanitized filename from the display name column...

CVE-2024-37010

CVE-2024-37010 Exploit for the CVE-2024-37010: access other user's external storage & lateral movement: https://www.cert.ssi.gouv.fr/avis/CERTFR-2024-AVI-0753/ https://owncloud.com/security-advisories/insecure-direct-object-reference-in-external-storage Intro Owncloud turns a server into a cloud...

EUVD-2026-94008

Backstage: Improper authorization enforcement for TechDocs static content...

Missing Authorization

Overview @backstage/plugin-techdocs-backend is a The Backstage backend plugin that renders technical documentation for your components Affected versions of this package are vulnerable to Missing Authorization via the /static/docs/:namespace/:kind/:name route handler in router.ts, where an attacke...

GHSA-RG9R-HR7G-5GC2 Backstage: Improper authorization enforcement for TechDocs static content

Impact An authenticated user with access to one TechDocs documentation site could craft a URL able to read documentation belonging to a different entity. This only affects deployments using the external TechDocs builder with an external storage provider S3, GCS, etc. and the permission framework...

CVE-2026-106489

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs documentation site could craft a URL able ...

CVE-2026-106489 Backstage: Improper authorization enforcement for TechDocs static content

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs documentation site could craft a URL able ...

CVE-2026-106489

The Backstage framework is vulnerable in the @backstage/plugin-techdocs-backend package prior to version 2.2.4 due to improper authorization enforcement for TechDocs static content. An authenticated user with access to one documentation site can craft a URL to read documentation belonging to a di...

CVE-2026-106489

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs documentation site could craft a URL able ...

CVE-2026-106489 Backstage: Improper authorization enforcement for TechDocs static content

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs documentation site could craft a URL able ...

CVE-2026-106489 Backstage: Improper authorization enforcement for TechDocs static content

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs documentation site could craft a URL able ...

PT-2026-107270

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 2.2.4 Description The @backstage/plugin-techdocs-backend package contains improper authorization enforcement for static content. An authenticated user with access to one TechDocs documentation site can craft a URL t...

CVE-2026-106489: Improper Limitation of a Pathname to a Restricted Directory

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs documentation site could craft a URL able ...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: ntfs-3g (UTSA-2022-000915)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2022-000915 advisory. A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the...

EUVD-2026-83460

The application protects access through its calculator-style vault passcode, but the stored data is not bound to that authentication boundary. A local actor who can access shared external storage, such as through an authorized non-root ADB shell or another local file-reading context with suitable...