Sebastian Hildebrandt systeminformation path traversal vulnerability

A security vulnerability exists in Sebastian Hildebrandt systeminformation versions prior to 5.33.14. This vulnerability stems from the Linux networkStatsiface implementation, which fails to validate interface values provided by callers. It utilizes parent directory components and symbolic links...

Oretnom23 Online Travel Agency System permission and access control vulnerability

The Oretnom23 Online Travel Agency System has a security vulnerability stemming from unrestricted file uploads related to the “employee photo” parameter in the admin/employeeinsert.php file. This flaw may allow remote attackers to upload arbitrary files...

Mozilla Thunderbird security vulnerabilities

Security vulnerabilities exist in Mozilla Thunderbird versions prior to 153.6 and 159. These vulnerabilities arise from the server directory search for calendars, account settings, or network calendar entries; it accepts calendar locations pointing to other servers, local files, or network shares...

PT-2026-126363

REDAXO before 5.21.4 contains a missing authorization vulnerability in the media pool bulk move that checks only target category permission, ignoring the source category. Authenticated backend users with permission for one media category can move files from restricted categories into it, then...

PT-2026-127164

Tanium addressed an insertion of sensitive information into log file vulnerability in Reputation...

PT-2026-126690

Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

PT-2026-126650

A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is invoked by a user, can trigger a Reflected Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to re...

Hitachi Energy TRO600 Series Firmware authorization issue vulnerability

Versions 9.0.0.0 through 9.1.1.0 of the Hitachi Energy TRO600 Series firmware contain an authorization issue vulnerability. This vulnerability stems from an arbitrary file read flaw, which allows unauthenticated attackers to read or download any files on affected devices, including sensitive...

PT-2026-125895

This issue may allow an authenticated IPMI Administrator to read arbitrary files from the BMC filesystem, disclosing material well beyond the intended IPMI management role...

CentOS Linux 8 [TuxCare] Security Update: rsync / rsync-daemon (CENTOS-STREAM8:CLSA-2026:1793098806)

The CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS- STREAM8:CLSA-2026:1793098806 advisory. - rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destinati...

Oracle Linux 10 : emacs (ELSA-2026-90887)

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-90887 advisory. - Fix arbitrary code execution upon opening file CVE-2026-96269 - Generalize trusted-content-p check to all Flymake backends CVE-2026-96442 Tenable has...

buildah security update

1.43.4-2.0.1 - Drop nmap-ncat requirement and skip ignore-socket test case Orabug: 34117178 2:1.43.4-2 - Rebuild for CVE-2026-78667 and CVE-2026-111943 - Resolves: RHEL-279009 - Resolves: RHEL-287507 2:1.43.4-1 - Update to buildah 1.43.4 c7061d00 - fix CVE-2026-56855 golang.org/x/crypto/ssh DoS a...

ALSA-2026:90887 Important: emacs security update

GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language elisp, and the capability to read e-mail and news. Security Fixes: emacs: GNU Emacs: Arbitrary code execution upon opening a file CVE-2026-96269 For more details...

CVE-2026-112350: Improper Limitation of a Pathname to a Restricted Directory

Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauthenticated remote attackers to read arbitrary files with root privileges due to missing authentication checks and insufficient sanitization of the filename parameter. Attackers...

CVE-2026-116673: Improper Limitation of a Pathname to a Restricted Directory

systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStatsiface implementation uses the caller-supplied interface value in an fs.existsSync check and to build /sys/class/net/ paths, including the operstate path, without verifying that it is a...

CVE-2026-90464: Improper Link Resolution Before File Access

An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with at least read-only Device Monitor privileges and access to the management CLI to create, truncate, or overwrite arbitrary files and modify kernel...

CVE-2026-118177: Undefined Security Weakness

When looking for calendars in a directory on a server, during account setup or when adding a new network calendar, Thunderbird accepted calendar locations pointing to other servers, local files or network shares. A malicious server, or a network attacker when the lookup used plain HTTP, could mak...

CVE-2026-118180: Undefined Security Weakness

When logging in to a Matrix account, Thunderbird used the homeserver address provided in the server's login response without validating it. A malicious or compromised homeserver could provide a file: URL, causing Thunderbird to send all further Matrix requests of that session to local files or, o...

PT-2026-127859

Name of the Vulnerable Software and Affected Versions Contact Manager versions prior to 9.1.3 Description An arbitrary file upload issue exists in the add message function. This occurs because an incomplete extension blacklist fails to detect dangerous extensions when a trailing dot causes the...

JeromeB GRR path traversal vulnerability

JeromeB GRR versions prior to 4.5.0 contain a path traversal vulnerability. This flaw arises because the database recovery functionality fails to validate file paths. Users with administrative privileges can manipulate input to read or delete any file on the server, potentially leading to the...