CVE-2026-55888

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file access to non-existing files on the host limited to files the user has access to. The FileChooser.SaveFiles method takes...

EUVD-2026-108954

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Your Dress your-dress allows PHP Local File Inclusion.This issue affects Your Dress: from n/a through 1.4.1...

CVE-2026-112850 WordPress Your Dress theme <= 1.4.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Your Dress your-dress allows PHP Local File Inclusion.This issue affects Your Dress: from n/a through 1.4.1...

CVE-2026-112850 WordPress Your Dress theme <= 1.4.1 - Local File Inclusion vulnerability

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in AncoraThemes Your Dress your-dress allows PHP Local File Inclusion.This issue affects Your Dress: from n/a through 1.4.1...

CVE-2026-112850

The AncoraThemes Your Dress WordPress theme is vulnerable to a Local File Inclusion (LFI) vulnerability in versions up to and including 1.4.1 . This flaw stems from Improper Control of Filename for Include/Require Statement in PHP Program (CWE-98). An attacker could potentially exploit this to in...

Exploit for CVE-2026-112900

Python Pillow Critical RCE Flaw CVE-20...

CVE-2026-55888

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file access to non-existing files on the host limited to files the user has access to. The FileChooser.SaveFiles method takes...

CVE-2026-55888 XDG Desktop Portal: Arbitrary file access via SaveFiles "files" option path traversal

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file access to non-existing files on the host limited to files the user has access to. The FileChooser.SaveFiles method takes...

CVE-2026-55888

The xdg-desktop-portal desktop integration portal is vulnerable to arbitrary file access due to a path traversal flaw in the FileChooser.SaveFiles method (affecting versions prior to 1.22.1 ). Malicious sandboxed applications (e.g., via Flatpak or Snap ) can bypass validation in the frontend and ...

CVE-2026-55888 XDG Desktop Portal: Arbitrary file access via SaveFiles "files" option path traversal

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file access to non-existing files on the host limited to files the user has access to. The FileChooser.SaveFiles method takes...

EUVD-2026-108752

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file access to non-existing files on the host limited to files the user has access to. The FileChooser.SaveFiles method takes...

CVE-2026-55888

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file access to non-existing files on the host limited to files the user has access to. The FileChooser.SaveFiles method takes...

CVE-2026-55888 XDG Desktop Portal: Arbitrary file access via SaveFiles "files" option path traversal

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file access to non-existing files on the host limited to files the user has access to. The FileChooser.SaveFiles method takes...

CVE-2026-99052 selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts

In the Linux kernel, the following vulnerability has been resolved: selinux: preserve NATIVELABELS on already-initialized sb in setmntopts When an NFSv4 filesystem exported with securitylabel is mounted a second time, sgetfc returns the existing superblock and nfsgetroot calls securitysbsetmntopt...

CVE-2026-99052

The Linux kernel contains a vulnerability where mounting an NFSv4 filesystem exported with security_label a second time can lead to a security regression. When the filesystem is remounted, sget_fc() returns the existing superblock, causing selinux_set_mnt_opts() to take an early exit without sett...

EUVD-2026-108847

In the Linux kernel, the following vulnerability has been resolved: selinux: preserve NATIVELABELS on already-initialized sb in setmntopts When an NFSv4 filesystem exported with securitylabel is mounted a second time, sgetfc returns the existing superblock and nfsgetroot calls securitysbsetmntopt...

CVE-2026-98975 xfs: stop exchanging reflink flags when exchanging mappings

In the Linux kernel, the following vulnerability has been resolved: xfs: stop exchanging reflink flags when exchanging mappings When an exchange covers both files from offset 0 to idisksize, xmicanexchangereflinkflags assumes every mapping moved and hands the reflink flag over to the other file...

CVE-2026-98975

The Linux kernel contains a vulnerability in the XFS filesystem where the xmi_can_exchange_reflink_flags() function incorrectly assumes all mappings are moved during an exchange from offset 0 to i_disk_size. This incorrect assumption leads to the clearing of a reflink flag on files that still own...

CVE-2026-98974 xfs: fix exchange-range-to-eof file size exchange

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size exchange Norbert Szetei posted a patch containing an incomplete description of a bug in XFSIOCEXCHANGERANGE's TOEOF flag. The bug tricks exchange-range into modifying a file so that it has...

CVE-2026-98974

In the Linux kernel, the following vulnerability has been resolved: xfs: fix exchange-range-to-eof file size exchange Norbert Szetei posted a patch containing an incomplete description of a bug in XFSIOCEXCHANGERANGE's TOEOF flag. The bug tricks exchange-range into modifying a file so that it has...