S3 File System - Moderately critical - Access bypass - SA-CONTRIB-2026-279

S3 File System s3fs provides an additional file system to your Drupal site that stores files in Amazon's Simple Storage Service S3 storage. The module doesn't sufficiently isolate upload context between separate objectfile operations in the same request resulting in the potential for objects to b...

Stage File Proxy - Critical - Cross-site scripting - SA-CONTRIB-2026-286

Stage File Proxy is a general solution for getting production files on a development server on demand. It is not intended for usage on production sites. The module doesn't sufficiently check file URL for malicious content when attempting to do fallback retrieval leading to a cross-site scripting...

Windows Common Log File System Driver Privilege Escalation

Windows Common Log File System Driver contains a privilege escalation vulnerability. This advisory documents a SOC investigation of detected exploitation activity and associated indicators. https://packetstorm.news/download/238031...

MSI Center Pro 2.1.37.0 Arbitrary File Write

MSI Center Pro version 2.1.37.0 contains an arbitrary file write vulnerability that may allow local privilege escalation to SYSTEM...

Xerte Project Xerte Online Toolkits arbitrary file upload vulnerability

Xerte Project Xerte Online Toolkits versions 3.15.5 and earlier contain an arbitrary file upload vulnerability. This vulnerability arises when a specially crafted language package ZIP containing the include.inc file is imported via importlanguage.php; subsequent requests using the language...

PT-2026-128067

XML External Entity XXE injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this functionality could provide ...

PT-2026-128220

In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to...

PT-2026-128314

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file browser for workspaces and $JENKINS HOME/userContent/, allowing attackers with Overall/Read permission to obtain the names, sizes, and last modification times of files in the...

PT-2026-129163

FearlessCMS is a flat-file content management system centered on simplicity and open source. Prior to version 0.1.4, five debug/test PHP scripts under admin/ perform privileged operations without isLoggedIn authentication checks, CSRF protection or adequate path validation. On PHP's built-in...

PT-2026-129184

Name of the Vulnerable Software and Affected Versions @hono/node-server versions 1.19.10 through 2.1.2 Description The serveStatic function decodes the request path a second time after the application has already decoded it for routing. A malformed percent-encoded sequence can cause the route...

PT-2026-127816

Name of the Vulnerable Software and Affected Versions Checkout Files Upload for WooCommerce WordPress plugin versions prior to 2.4.0 Description An issue exists where the plugin fails to validate uploaded file types when the accepted file types setting is left empty. This configuration, intended ...

PT-2026-127856

The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'tmp file' parameter parameter. This makes it possible for authenticated attackers, with editor-level access and above, to read the contents of arbitrary files on the server,...

CVE-2026-107745: tigroumeow: The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to limited media file…

The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to limited media file deletion due to insufficient file path validation in the uploadfile function in all versions up to, and including, 3.8.4 This makes it possible for authenticated attackers, with...

CVE-2026-116132: Incomplete Cleanup

HTTP::Body versions before 1.2301 for Perl leave the temporary file of an incomplete multipart upload on disk. The multipart parser creates a temporary file as soon as a file part starts, but adds it to the upload list only when the part completes. Uploads are only ever deleted from that list, by...

CVE-2026-117626: Undefined Security Weakness

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the file browser for workspaces and $JENKINSHOME/userContent/, allowing attackers with Overall/Read permission to obtain the names, sizes, and last modification times of files in the...

CVE-2026-99137: Linux: In the Linux kernel, the following vulnerability has been resolved: cifs: don't update i_size in cifs_do_truncate…

In the Linux kernel, the following vulnerability has been resolved: cifs: don't update isize in cifsdotruncate without a cached handle If findwritablefile returns null, cifsfileflush will return 0 without issuing setfilesize, and the outer 'if !rc' block will set isize to 0 before telling the...

CVE-2026-110185: bitpressadmin: The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More plugin for…

The Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.31.0 via the 'image any body field referenced by the ImageHelper node's mix tag' parameter...

CVE-2026-118646: n8n-io n8n: n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vulnerability that allows…

n8n before 1.123.85, 2.43.5, and 2.44.1 contains a regular expression denial of service vulnerability that allows authenticated members to block the event loop via crafted glob patterns. Attackers who can create and run workflows can submit a wildcard-heavy Files Selector pattern causing...

CVE-2026-111255: cservit affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display: The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to…

The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 3.9.2 via the uploadimage function. This is due to insufficient file type validation in uploadimage due to a weak Content-Type...

CVE-2026-109218: kleor Contact Manager: The Contact Manager plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including,…

The Contact Manager plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 9.1.2 via the addmessage function. This is due to an incomplete extension blacklist that fails to detect dangerous extensions when a trailing dot causes the extension-derivation...