CVE-2026-107053

The foobnix Librera PDF Reader (versionCode 7222 ) contains a vulnerability due to insecure permissions . This flaw allows unauthorized attackers to arbitrarily write and truncate files within a shared storage space located outside of the application's sandbox. Specific details regarding exploita...

PT-2026-132384

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path...

EUVD-2026-113261

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path...

CVE-2026-107053

Insecure permissions in foobnix Librera PDF Reader versionCode 7222 allows unauthorized attackers to arbitrarily write and truncate files in a shared storage space outside of the sandbox...

CVE-2026-107055

Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files...

PT-2026-132497

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplateActivator. generate removes an existing output only when Path.exists is true, allowing a dangling symlink to survive and redirect generated activation content, while PyEnvCfg.write opens pyvenv.cf...

Linux Distros Unpatched Vulnerability : CVE-2026-118693

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::createimagefromxml that trusts unvalidated embedded-file 'filename'...

Python < 3.11.18 / 3.12.x < 3.12.16 / 3.13.x < 3.13.18 / 3.14.x < 3.14.10 / 3.15.x < 3.15.2 / 3.16.x < 3.16.0 Multiple Vulnerabilities

The version of Python installed on the remote Windows host is prior to 3.11.18, or is 3.12.x prior to 3.12.16, or 3.13.x prior to 3.13.18, or 3.14.x prior to 3.14.10, or 3.15.x prior to 3.15.2, or 3.16.x prior to 3.16.0. It is, therefore, affected by multiple vulnerabilities: - tarfile.tarfilter...

RHEL 9 : mrtg (RHSA-2026:92051)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:92051 advisory. The Multi Router Traffic Grapher MRTG monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provid...

RockyLinux 9 : podman (RLSA-2026:90362)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:90362 advisory. podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HTTP Range headers...

Alibaba Cloud Linux 3 : 0323: rsync (ALINUX3-SA-2026:0323)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0323 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-53783: rsync before3.5.0 contains...

RHEL 9 : resteasy (RHSA-2026:90894)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:90894 advisory. RESTEasy contains a JBoss project that provides frameworks to help build RESTful Web Services and RESTful Java applications. It is a fully certified...

Linux Distros Unpatched Vulnerability : CVE-2026-118654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's static file handlers can normalize dot segments after route matching and serve a file through a...

HCL BigFix Server 10.0.x <= 10.0.16 / 11.0.x <= 11.0.7 Certificate Validation (KB0134758)

The version of HCL BigFix Server installed on the remote host is 10.0.x through 10.0.16 or 11.0.x through 11.0.7. It is, therefore, affected by a vulnerability in the bundled CA certificate store: - BigFix Platform uses Mozilla CA certificate bundle PEM. Versions of the bundle dated before...

Yamaha NWR100 authorization issue vulnerability

Yamaha NWR100 Rev.26.00.07 and earlier versions contain an authorization issue vulnerability. This vulnerability stems from improper storage of sensitive information; configuration files generated by the CONFIG file export functionality may be read by unauthenticated attackers, leading to...

OpenEQUELLA input validation error vulnerability

Versions of openEQUELLA prior to 2026.1 contain an input validation error vulnerability. This flaw arises because the XML parser used for project metadata fails to disable external entity resolution. Users with project creation privileges can submit specially crafted XML via POST /api/item,...

WordPress MasterStudy LMS path traversal vulnerability

WordPress MasterStudy LMS versions prior to 3.7.50 contain a path traversal vulnerability. This vulnerability stems from a lack of authorization checks; any authenticated user including subscribers can trigger the stmlmssendtestemailajax AJAX action without proper capability or nonce validation...

OpenEQUELLA input validation error vulnerability

Versions of openEQUELLA prior to 2026.1 contain an input validation error vulnerability. This vulnerability arises because the SOAP API uses an XML parser capable of parsing external entities during the stopEdit operation; it may allow attackers to read any file accessible to the service or cause...

IBM Langflow OSS path traversal vulnerability

IBM Langflow OSS versions 1.0.0 through 1.12.4 contain a path traversal vulnerability. This vulnerability allows authenticated users to perform directory traversal by sending specially crafted URL requests to view any file on the system...

EUVD-2026-113346

DB-GPT v0.7.5 and 0.8.0 contains directory traversal in useexamplefile packages/dbgpt-app/src/dbgptapp/openapi/apiv1/examplesapi.py:129. A remote attacker can use the validated exploitation path to write files outside the intended workspace or storage boundary...