CVE-2026-117617: Undefined Security Weakness

Jenkins 2.587 and earlier, LTS 2.580.1 and earlier checks for symbolic links in the path of an extracted file only before creating its parent directories, not immediately before writing it, and allows symbolic links in artifacts to replace existing files or empty directories, allowing attackers...

CVE-2026-112198: Tactis NoviGest Desktop App: XML External Entity (XXE) injection vulnerability in the SAFT import feature of the NoviGest Desktop App

XML External Entity XXE injection vulnerability in the SAFT import feature of the NoviGest Desktop App. The application processes user-controlled XML files using a JAXB Unmarshaller without properly disabling external entity resolution. An attacker with access to this functionality could provide ...

CVE-2026-118485: Axel Download Accelerator Axel: Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (http_decode()) on the output filename…

Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding httpdecode on the output filename after the URL has been parsed and the filename component extracted. This allows an attacker to embed %2e%2e%2f URL-encoded ../ sequences in the URL path. These sequences survive the URL...

CVE-2014-125137: C97net: C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain a local file…

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain a local file inclusion vulnerability in the run parameter of admin/task.php. Authenticated administrators can supply directory traversal sequences in the run parameter to include and disclose...

CVE-2014-125138: C97net: C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an unrestricted…

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an unrestricted file upload vulnerability in administrative image fields. Editor-role users can upload PHP scripts via the pageimage or catimage parameters to the web-accessible /public/image...

CVE-2026-103688: Unknown Checkout Files Upload for WooCommerce: The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded file types when its…

The Checkout Files Upload for WooCommerce WordPress plugin before 2.4.0 does not validate uploaded file types when its accepted file types setting is left empty, which it documents as the way to accept all files, allowing unauthenticated users to upload arbitrary files, including PHP files that...

Magento Open Source 2.4.9 Unrestricted File Upload

Magento Open Source versions through 2.4.9 contain an unrestricted file upload flaw in the guest-cart REST API. The proof of concept starts a loopback lab and demonstrates accepting a GIF/PHP polyglot using a non-executing witness payload. https://packetstorm.news/download/238040...

WordPress midi-Synth 1.1.0 Arbitrary File Upload

WordPress midi-Synth plugin versions through 1.1.0 contain an unauthenticated arbitrary file upload vulnerability in the export AJAX action. The proof of concept uploads a test file or PHP shell. https://packetstorm.news/download/238053...

CVE-2026-84999: Pie Register Pie Register Premium: The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and…

The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 3.8.4.0 via the pieregfileupload function. This is due to the plugin performing file type validation via wpcheckfiletype and wpcheckfiletypeandext but never checking...

PT-2026-128305

Name of the Vulnerable Software and Affected Versions Jenkins versions prior to 2.588 Jenkins LTS versions prior to 2.580.2 Description An issue exists during the extraction of archives where the system checks for symbolic links in the path of an extracted file only before creating parent...

AlmaLinux 10 : emacs (ALSA-2026:90887)

The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:90887 advisory. emacs: GNU Emacs: Arbitrary code execution upon opening a file CVE-2026-96269 Tenable has extracted the preceding description block directly from the AlmaLinux...

October 28, 2026—KB5127653 (OS Builds 28000.3365) Preview

October 28, 2026—KB5127653 OS Builds 28000.3365 Preview Applies To Windows 11 version 26H1, all editions This cumulative update for Windows 11, version 26H1 KB5127653, includes production-quality improvements. Announcements and messages This section provides key notifications related to this...

CVE-2026-109384: melograno The Innovative Form Builder – IvyForms: The The Innovative Form Builder – IvyForms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions…

The The Innovative Form Builder – IvyForms plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.5.1 via the filterFiletypeAndExt function. This is due to insufficient file type validation due to the absence of a dangerous-extension denylist in the...

FreeBSD : py-svglib -- Multiple vulnerabilities (bdac753c-d1d5-11f1-985e-901b0edee044)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the bdac753c-d1d5-11f1-985e-901b0edee044 advisory. Dinu Gherman reports: The SVG elliptical-arc parser in svglib.utils.splitarcvalues builds a...

MiracleLinux 8 : flatpak-1.12.9-9.el8_10 (AXSA:2026-2183:09)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2183:09 advisory. flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitra...

Linux Distros Unpatched Vulnerability : CVE-2026-118180

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server's login response without validating it. A malicious or...

Single Content Sync - Critical - Remote code execution - SA-CONTRIB-2026-275

Single Content Sync enables exporting and importing content, referenced entities, and files between Drupal sites. A maliciously crafted import file can cause untrusted data to be deserialized, potentially leading to remote code execution. This vulnerability is mitigated by the fact that an attack...

CVE-2026-61564: WWBN AVideo-Encoder: AVideo is a video-sharing Platform

AVideo is a video-sharing Platform. Prior to 8.1.0, the unauthenticated installer endpoint install/checkConfiguration.php assembles videos/configuration.php by interpolating request parameters, including webSiteRootURL, into single-quoted PHP string literals without escaping. An attacker can...

PT-2026-128277

An Improper Link Resolution Before File Access 'Link Following' vulnerability in the unauthenticated web server handlers in Juniper Networks Session Smart Router and Session Smart Conductor allows a local unprivileged user to overwrite arbitrary files as root via unauthenticated API endpoints. Th...

Dell PowerProtect Data Domain path traversal vulnerability

Versions 7.7.1.0 through 8.8 of Dell PowerProtect Data Domain, versions 7.13.1.0 through 7.13.1.80 of LTS2024, versions 8.3.1.0 through 8.3.1.40 of LTS2025, and versions 8.6.1.0 through 8.6.1.20 of LTS2026 contain a path traversal vulnerability. This vulnerability stems from improper restrictions...