Amazon Linux 2 : docker (ALASECS-2026-148)

The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-148 advisory. The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers...

GHSA-jpc4-w9r8-43j3

GHSA-jpc4-w9r8-43j3 — Statamic unauthorized arbitrary-extensio...

CVE-2026-115932

When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it does not check that the file lies inside the upload directory. A registered user can store a crafted media path with a post, get it past the checks that normally restrict it, and...

CVE-2026-115932

The Postiz application is vulnerable to a path traversal vulnerability when a user publishes a post. The system fails to verify that media paths not pointing to web addresses remain within the designated upload directory. A registered user (or a self-registered account) can provide a crafted path...

CVE-2026-115932 Path traversal in post media lets any registered user read server files

When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it does not check that the file lies inside the upload directory. A registered user can store a crafted media path with a post, get it past the checks that normally restrict it, and...

EUVD-2026-109293

When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it does not check that the file lies inside the upload directory. A registered user can store a crafted media path with a post, get it past the checks that normally restrict it, and...

CVE-2026-115932 Path traversal in post media lets any registered user read server files

When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it does not check that the file lies inside the upload directory. A registered user can store a crafted media path with a post, get it past the checks that normally restrict it, and...

CVE-2026-115932 Path traversal in post media lets any registered user read server files

When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it does not check that the file lies inside the upload directory. A registered user can store a crafted media path with a post, get it past the checks that normally restrict it, and...

CVE-2026-116020 BookStack before 26.09.2 Incorrect Authorization via AttachmentController on Draft Pages

BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authenticated users to access other users' draft page attachments by ID. Attackers with attachment permissions can enumerate sequential attachment IDs to download, rename, relink, or...

CVE-2026-116020

BookStack versions prior to 26.09.2 are vulnerable to an incorrect authorization flaw in the AttachmentController . This vulnerability allows authenticated users to access attachments belonging to other users' unpublished draft pages by identifying sequential attachment IDs. Attackers with suffic...

EUVD-2026-109267

Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the media permission to write arbitrary files by supplying ../ sequences in the name parameter. Attackers can send a base64 data: URI to the cropurl media action to write an ERB template into a theme's...

CVE-2026-108013

BigFix Platform uses Mozilla CA certificate bundle PEM. Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When BigFix Platform validates servers using such a bundle, an on-path attacker can impersonate remote servers and tamper with...

CVE-2026-108013 HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)

BigFix Platform uses Mozilla CA certificate bundle PEM. Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When BigFix Platform validates servers using such a bundle, an on-path attacker can impersonate remote servers and tamper with...

CVE-2026-108013

The HCL BigFix Platform is affected by a security vulnerability involving an outdated Mozilla CA certificate bundle (PEM) . Bundles dated before 2026/10/20 still trust certificates with compromised private keys. This allows an on-path attacker to impersonate remote servers and tamper with files d...

EUVD-2026-109219

BigFix Platform uses Mozilla CA certificate bundle PEM. Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When BigFix Platform validates servers using such a bundle, an on-path attacker can impersonate remote servers and tamper with...

CVE-2026-108013 HCL BigFix Platform is affected by security vulnerability around intermediate CA certificate bundle (CVE ID)

BigFix Platform uses Mozilla CA certificate bundle PEM. Versions of the bundle dated before 2026/10/20 still trust certificates whose private keys have been compromised. When BigFix Platform validates servers using such a bundle, an on-path attacker can impersonate remote servers and tamper with...

CVE-2026-113491

The GeoDirectory WordPress plugin before 2.8.194 does not validate a user-supplied image URL before using it as a local file path when saving a front-end listing, allowing users with Subscriber-level access and above to read files from outside the web root and to delete files on the server, limit...

CVE-2026-113673

The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...

EUVD-2026-109216

The GeoDirectory WordPress plugin before 2.8.194 does not properly escape administrator-defined text before writing it into a generated PHP file in its own folder, allowing high privilege users such as a subsite administrator on a multisite network, who cannot otherwise run code, to achieve Remot...

CVE-2026-113491

The GeoDirectory WordPress plugin (versions before 2.8.194 ) is vulnerable to a Path Traversal vulnerability (CWE-22 ) due to insufficient validation of user-supplied image URLs when saving front-end listings. This flaw allows users with Subscriber-level access or higher to read files from outsid...