CVE-2026-17615: Improper Restriction of XML External Entity Reference

A flaw was found in RESTEasy's SourceProvider. This vulnerability allows an unauthenticated attacker to perform an unauthenticated remote file read. By sending a specially crafted XML body with a DOCTYPE declaration referencing external entities to an endpoint that accepts application/xml and...

PT-2026-83781

Name of the Vulnerable Software and Affected Versions ILIAS versions prior to 9.22 ILIAS versions 10.0 through 10.9 ILIAS versions 11.0 through 11.2 Description An arbitrary file read issue exists in the SOAP addFile method. Authenticated users can read server files by providing crafted XML using...

CVE-2026-79750: Authorization Bypass Through User-Controlled Key

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.30, MCPHub scopes non-admin users to servers they own list views and config edits enforce ownership, but the...

CVE-2026-79407

A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILENAME value used by setfilename and loadmetadata in metagpt/ext/spo/utils/load.py. The vulnerable code joins the attacker-controlled FILENAME value with the settings director...

CVE-2026-79407

A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILENAME value used by setfilename and loadmetadata in metagpt/ext/spo/utils/load.py. The vulnerable code joins the attacker-controlled FILENAME value with the settings director...

CVE-2026-79407

A path traversal vulnerability exists in the SPO extension of MetaGPT 0.8.1 . The issue occurs in metagpt/ext/spo/utils/load.py within the set_file_name() and load_meta_data() functions. The root cause is that the application joins an attacker-controlled FILE_NAME value with the settings director...

PT-2026-83997

A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILE NAME value used by set file name and load meta data in metagpt/ext/spo/utils/load.py. The vulnerable code joins the attacker-controlled FILE NAME value with the settings...

PT-2026-83786

Name of the Vulnerable Software and Affected Versions Apache Wicket versions prior to 8.19.0 Apache Wicket versions prior to 9.24.0 Apache Wicket versions prior to 10.11.0 Description Improper validation of resource URL attributes allows an unauthenticated remote attacker to read files from the w...

PT-2026-83948

MCPHub is a unified hub for centrally managing and dynamically orchestrating multiple MCP servers/APIs into separate endpoints with flexible routing strategies. Prior to version 1.0.30, MCPHub scopes non-admin users to servers they own list views and config edits enforce ownership, but the...

EUVD-2026-68878

A path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read arbitrary files via the FILENAME value used by setfilename and loadmetadata in metagpt/ext/spo/utils/load.py. The vulnerable code joins the attacker-controlled FILENAME value with the settings director...

CVE-2026-56718

AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service that allows unauthenticated remote attackers to read arbitrary files with root privileges by supplying path traversal sequences in the HTTP request URI. Attackers can send...

CVE-2026-56718

AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service. An unauthenticated remote attacker can supply path traversal sequences in the HTTP request URI on port 80 to read arbitrary files with root privileges . Exposed data inclu...

CVE-2026-56718 AJCloud AJY IPC Firmware Path Traversal via jdbhttpd

AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service that allows unauthenticated remote attackers to read arbitrary files with root privileges by supplying path traversal sequences in the HTTP request URI. Attackers can send...

EUVD-2026-68290

AJCloud AJY IPC firmware prior to version 01.10715.11.37 contains a path traversal vulnerability in the jdbhttpd web service that allows unauthenticated remote attackers to read arbitrary files with root privileges by supplying path traversal sequences in the HTTP request URI. Attackers can send...

CVE-2026-82640 browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storage

browser-use web-ui versions 2.0.0 through 3.0.0 write configured LLM API keys to disk in cleartext without encryption or access restrictions. Attackers with read access to the temporary settings directory can recover provider API keys from predictably-named JSON files...

OESA-2026-3524 python-GitPython security update

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. Security Fixes: GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attacker...

OESA-2026-3523 python-GitPython security update

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. Security Fixes: GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attacker...

PT-2026-83633

Name of the Vulnerable Software and Affected Versions AJCloud AJY IPC versions prior to 01.10715.11.37 Description The jdbhttpd web service contains a path traversal flaw that allows unauthenticated remote attackers to read arbitrary files with root privileges. By sending crafted HTTP requests to...

Exploit for CVE-2026-12243

CVE-2026-12243 — NLTK Path Traversal Lab !CVEhttps://img...

XML External Entity (XXE) Injection

mapfish-print is vulnerable to XML External Entity XXE Injection. The vulnerability is due to improper parsing of attacker-controlled XML with external entities and DTDs enabled, which allows an unauthenticated attacker to read local files and perform server-side request forgery SSRF by accessing...