PuMuKIT arbitrary file upload vulnerability

PuMuKIT has an arbitrary file upload vulnerability. This vulnerability stems from a lack of restrictions on the types of files that can be uploaded; it allows unauthenticated attackers to upload any type of file to any path where web service users have write permissions on the server. It may also...

Mozilla Thunderbird security vulnerabilities

A security vulnerability exists in Mozilla Thunderbird versions prior to 159 and prior to 153.6. This vulnerability arises from the failure to validate the homeserver address provided in server login responses. A malicious or compromised homeserver can return a file: URL, causing subsequent Matri...

CVE-2026-57202: Privilege Defined With Unsafe Actions

Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 23.4.1 and Certified Asterisk 20.7-cert11, 22.8-cert3, an authenticated Asterisk REST Interface ARI attacker with read-only privileges may use setChannelVar to execute write...

CVE-2026-108141: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

CVE-2026-118178: Undefined Security Weakness

A remote RSS feed could use the itunes:new-feed-url or newLocation element to permanently change its stored subscription URL to a file: URL. Thunderbird then read that location on every feed update. This allowed a malicious feed, or an attacker able to modify a feed delivered over HTTP, to make...

CVE-2026-102636: Improper Neutralization of Input During Web Page Generation

A maliciously crafted HTML payload in a design name, when displayed after another user opens the manipulated design, can trigger a Stored Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to read local files or...

CVE-2026-102637: Improper Neutralization of Input During Web Page Generation

A maliciously crafted HTML payload in the documentName parameter of a Fusion protocol URL, when the protocol URL is invoked by a user, can trigger a Reflected Cross-site Scripting XSS vulnerability in the Autodesk Fusion desktop application. A malicious actor may leverage this vulnerability to re...

PT-2026-126382

TRO600 contains an arbitrary file read vulnerability. An unauthenticated attacker can exploit this vulnerability to read or download arbitrary files on the affected device, including sensitive configuration files and password data, resulting in the disclosure of sensitive information...

Graham Steffaniak filebrowser path traversal vulnerability

A security vulnerability exists in Graham Steffaniak FileBrowser versions prior to 1.5.2-stable and from 2.0.0-beta up to 2.0.1-beta. This vulnerability arises because file reading processes fail to verify that the resolved target of symbolic links lies within the source root directory and is...

CVE-2026-108332: Improper Link Resolution Before File Access

Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension...

Tanium endpoint configuration toolset solution post-link vulnerability

Versions prior to 1.51.60 of the Tanium endpoint configuration toolset, versions prior to 1.59.50 of the 1.59.x series, and versions prior to 1.71.25 of the 1.71.x series contain a post-link vulnerability. This vulnerability stems from improper link resolution prior to file access, potentially...

PT-2026-127215

Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unauthenticated remote attackers to read arbitrary files with root privileges due to missing authentication checks and insufficient sanitization of the filename parameter. Attackers...

Sunhillo SureLine path traversal vulnerability

Versions prior to Sunhillo SureLine 9.1.5 contain a path traversal vulnerability. This vulnerability stems from the lack of authentication checks on the radarUpdater.cgi endpoint and insufficient sanitization of the filename parameter. Unauthenticated remote attackers can perform directory...

PT-2026-126654

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges...

Linux Distros Unpatched Vulnerability : CVE-2026-115905

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zip is a zip library for Rust that supports reading and writing simple ZIP files. Through 9.0.4, ZipArchive treats Central Directory File Header filenames as...

PT-2026-127219

Name of the Vulnerable Software and Affected Versions Model Context Protocol Python SDK versions 1.10.0 through 1.29.1 Model Context Protocol Python SDK versions 2.0.0 through 2.1.1 Description When a connected server declares an outputSchema for a tool, the SDK client validates call tool results...

Hitachi Energy RTU500 Relative Path Traversal (CVE-2026-8066)

A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in unauthorized modification of...

MiracleLinux 9 : python3.9-3.9.25-7.el9_8.6 (AXSA:2026-2165:08)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-2165:08 advisory. python: python: Arbitrary file deletion via race condition during temporary directory cleanup CVE-2026-12345 python: python: Certificate verificatio...

SUSE SLES12: libpython2_7-1_0 / libpython2_7-1_0-32bit / python / python-32bit / etc (SUSE-SU-2026:4904-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4904-1 advisory. This update for python, python-base, python-doc fixes the following issue: - CVE-2026-82049: tarfile extraction filters mishandle archives...

RockyLinux 10 : flatpak (RLSA-2026:89849)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:89849 advisory. flatpak: flatpak: Arbitrary file deletion in root context via path traversal in deploy directory export/bin CVE-2026-97023 flatpak: flatpak: Arbitrary...