EUVD-2026-93951

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...

CVE-2026-101155

An authenticated remote attacker with specific permissions can perform a Path Traversal (CWE-22) attack on the Software Management Studio Software Repository . By using specially crafted requests or file uploads, the attacker can read or write files on the platform filesystem beyond the intended ...

EUVD-2026-93950

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

CVE-2026-101154

An authenticated remote attacker with specific permissions can perform a Path Traversal (CWE-22) attack to read or write files on the platform filesystem beyond the intended scope. This vulnerability occurs through specially crafted requests and/or crafted file uploads to the Network Provisioning...

Exploit for CVE-2026-21589

CVE-2026-21589 - Atlassian Data Center Una...

Exploit for CVE-2026-21589

CVE-2026-21589 Pre-auth arbitrary file read in Atlassian DC p...

CVE-2026-105834 Rundeck before 6.2.0 Arbitrary File Read via File Resource Model Source

Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the...

CVE-2026-105834 Rundeck before 6.2.0 Arbitrary File Read via File Resource Model Source

Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the...

CVE-2026-105834

Rundeck versions before 6.2.0 are vulnerable to a path traversal vulnerability in the File Resource Model Source . This flaw allows users with only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to an absolute path. Attackers can exploit this vi...

CVE-2026-105834 Rundeck before 6.2.0 Arbitrary File Read via File Resource Model Source

Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the...

Exploit for CVE-2026-21589

CVE-2026-21589 - Jira/Confluence/Bitbucket Arbitrary File Read...

CVE-2026-105751

A flaw was found in docling. When parsing OpenDocument files, the backend resolves image reference attributes directly as local filesystem paths without enforcing directory boundaries or URI scheme validation. An attacker could provide a crafted document that causes docling to read arbitrary loca...

CVE-2026-105744

A flaw was found in docling. When configured to process LaTeX documents using the Tectonic engine, the application does not restrict TeX file operations during compilation. An attacker could exploit this vulnerability by submitting crafted document input to read sensitive files or overwrite...

CVE-2026-101154: Improper Limitation of a Pathname to a Restricted Directory

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

CVE-2026-106507: Improper Link Resolution Before File Access

Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary file read via mkdocs snippets. Unsafe path resolution in TechDocs source tree handling allows an authenticated user who can register...

CVE-2026-101155: Improper Limitation of a Pathname to a Restricted Directory

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Software Management Studio Software Repository...

Arbitrary File Read via Argument Injection in Configuration Search Utility

: An argument injection vulnerability exists in the configuration management command-line utility of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When executing configuration viewing commands with search pattern filters, the utility fails to sanitize user-supplied search...

PT-2026-107304

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 1.15.4 Description The @backstage/plugin-techdocs-node package contains an arbitrary file read flaw. Unsafe path resolution during the handling of the TechDocs source tree allows an authenticated user with permissio...

CVE-2026-106219: External Control of File Name or Path

In JetBrains TeamCity before 2026.2.1 missing validation of Git submodule URLs allowed reading local repositories on the server...

PT-2026-107136

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...