CVE-2026-66310: External Control of File Name or Path

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally...

CVE-2026-18806: External Control of File Name or Path

External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 0.9.0...

CVE-2026-65802: External Control of File Name or Path

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network...

CVE-2026-64816: External Control of File Name or Path

RapidRAW before 1.6.0 does not validate the lutPath field in preset files before passing it to File::open in lutprocessing.rs. On Windows, a UNC path in lutPath causes an outbound SMB connection to an attacker-controlled host, leaking the victim's NTLMv2 credentials. The vulnerable code path is...

CVE-2026-50462: External Control of File Name or Path

External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally...

CVE-2026-54108: External Control of File Name or Path

External control of file name or path in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-8921: External Control of File Name or Path

External Control of File Name or Path vulnerability in ASUS Business Manager allows a local user to execute arbitrary code with SYSTEM privileges via a tampered IPC message. Refer to the ' Security Update for ASUS Business Manager ' section on the ASUS Security Advisory for more information...

CVE-2026-58293: External Control of File Name or Path

External control of file name or path in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-3602: External Control of File Name or Path

IBM App Connect Enterprise 13.0.1.0 through 13.0.7.2, and 12.0.1.0 through 12.0.12.26 and IBM Integration Bus for z/OS 10.1.0.0 through 10.1.0.7 is vulnerable to SQL injection. A remote attacker could socially engineer a user into accidentally creating files they may not be aware of...

CVE-2026-47214: External Control of File Name or Path

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI and path handling. This vulnerability is fixed in 2.94.0...

CVE-2026-41107: External Control of File Name or Path

External control of file name or path in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

CVE-2026-40370: External Control of File Name or Path

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network...

CVE-2026-32204: External Control of File Name or Path

External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally...

CVE-2025-65115: External Control of File Name or Path

Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management 2 - Operations Director on Windows, Job Management Partner 1/IT Desktop Management 2 - Manager on Windows, JP1/IT Desktop Management - Manager on Windows, Job Management Partner 1/IT...

CVE-2026-30903: External Control of File Name or Path

External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access...

CVE-2026-26359: External Control of File Name or Path

Dell Unisphere for PowerMax, versions 10.2, contains an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to the ability to overwrite arbitrary files...

CVE-2026-26361: External Control of File Name or Path

Dell Unisphere for PowerMax, versions 10.2, contains an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-26360: External Control of File Name or Path

Dell Unisphere for PowerMax, versions 10.2, contains an External Control of File Name or Path vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability to delete arbitrary files...

CVE-2026-21249: External Control of File Name or Path

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally...

CVE-2026-20872: External Control of File Name or Path

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...