BIT-DOTNET-2026-50526 .NET Tampering Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

PT-2026-65210

Name of the Vulnerable Software and Affected Versions Safari versions prior to 26.6 iOS versions prior to 26.6 iPadOS versions prior to 26.6 macOS Tahoe versions prior to 26.6 tvOS versions prior to 26.6 visionOS versions prior to 26.6 watchOS versions prior to 26.6 Description An access issue...

PT-2026-64874

Name of the Vulnerable Software and Affected Versions ZTE File Manager affected versions not specified Description The zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity activity is intended to preview compressed files. Third-party applications can launch this activity and provide arbitrary fi...

PT-2026-65008

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

PT-2026-65024

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

Information Exposure

dompdf/dompdf is vulnerable to Information Exposure. The vulnerability is due to insufficient validation of data-URI embedded SVG elements, which allows an attacker to reference local files through the href or xlink:href attributes and exploit differences in file processing behavior to leak...

CVE-2026-66012

SiYuan before v3.7.2 has an unauthenticated access path via POST /mcp due to missing authorization enforcement (no admin/read-only role checks). In Publish anonymous mode, an anonymous RoleReader JWT can reach /mcp, enabling an attacker to read conf/conf.json (exfiltrating accessAuthCode, api.tok...

GHSA-2XWM-4H2Q-GGFX Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete

Summary Current main and v0.9.6 still allow an authenticated user to turn read-only access to another user's file into write/delete access by attaching that file ID to an attacker-controlled workspace model. This is an incomplete-fix variant of GHSA-vjqm-6gcc-62cr. The current fix adds...

EUVD-2026-42634

Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete...

CVE-2026-65708

CVE-2026-65708 affects sysPass version 3.2.11. An insecure direct object reference in the AccountFileController lets any authenticated attacker access account file attachments they lack ACL permissions for by supplying arbitrary numeric file IDs in actions such as download, view, delete, upload, ...

CVE-2026-66007

Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the filename metadata field is not properly validated before being joined to the dataset directory. Attackers can supply crafted filename values with directory traversal...

CVE-2026-66007

CVE-2026-66007 affects HuggingFace Datasets (datasets) up to version 5.0.0. A path traversal vulnerability exists in folder-based dataset builders where the file_name metadata field is not properly validated before being joined to the dataset directory. Crafting file_name values with directory tr...

Security update for perl-DBI (important)

openSUSE security update: security update for perl-dbi ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21412-1 Rating: important References: bsc1271399 bsc1271458 bsc1271459 bsc1271629 Cross-References: CVE-2026-15043 CVE-2026-15392 CVE-2026-60081...

CVE-2026-65698 Void 1.3.4 Path Traversal via AI Agent File-Reading Tools

Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools that allows network-adjacent attackers to read arbitrary host files outside the open workspace by injecting instructions into content the agent processes. Attackers can supply absolute paths or file://...

CVE-2026-64814

In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session...

PYSEC-2026-3499 PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal

PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversal Summary PraisonAI's Dynamic Context module provides filesystem-backed history and terminal-log storage. The SDK reference describes the module as providing: - artifact storage for tool...

CVE-2026-64814

In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session...

EUVD-2026-48239

In JetBrains IntelliJ IDEA before 2026.2 unauthorized file access was possible in a Remote Development session...

CVE-2026-64814

CVE-2026-64814 affects JetBrains IntelliJ IDEA prior to 2026.2, where unauthorized file access was possible during a Remote Development session. The provided documents state the condition but do not specify root cause details, exact vulnerable components, exploitable conditions beyond the Remote ...

acl security update

An update is available for acl. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Access Control Lists ACLs are used to define fine-grained discretionary access...