195 matches found
PT-2026-96748
Name of the Vulnerable Software and Affected Versions NVIDIA Infrastructure Controller for Linux affected versions not specified Description An issue exists where an attacker can achieve external control of a file name or path. This could lead to code execution, escalation of privileges, data...
CVE-2026-73171
Nozomi Networks Labs identified a CWE-73: External Control of File Name or Path vulnerability in the backup-restore workflow of Advantech EKI-1242EIMS in firmware version V1.06.01 that allows a remote authenticated attacker to overwrite arbitrary files on the device filesystem by uploading a...
CVE-2026-79692
Dell Secure Connect Gateway (SCG) 5.0 Appliance (versions prior to 5.36.00.16) and Application (versions prior to 5.36.00.00) contain an External Control of File Name or Path vulnerability. An unauthenticated remote attacker could exploit this flaw to gain filesystem access . The Dell-assigned CV...
CVE-2026-66302
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network...
EUVD-2026-74044
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network...
EUVD-2026-73721
External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network...
PT-2026-88281
External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network...
PT-2026-87395
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description External control of a file name or path allows an authorized attacker to execute arbitrary code over a network, which can affect the system. Recommendations At the moment,...
CVE-2026-18751 Citrix Workspace App for Mac Security Bulletin for CVE-2026-18751
External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607...
EUVD-2026-60701
External control of file name or path vulnerability in Citrix WorkSpace App on MacOS. This issue affects WorkSpace App: 2607...
CVE-2026-34492
Johnson Controls Airwall (before 4.1) is affected by CVE-2026-34492: external control of a file name or path can lead to arbitrary file read (and related file manipulation). The provided documents do not specify the exact root cause details, vulnerable components, or affected versions beyond Air...
External Control of File Name or Path
Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to External Control of File Name or Path via the GDALRaster constructor in spatial lookups. An attacker can write arbitrary files or...
CVE-2026-18806
The CVE-2026-18806 entry concerns pardus-image-writer (before 1.0.4) with an external control of the file name or path vulnerability. The issue is described across CVE/NVD/CVELIST as affecting pardus-image-writer and enabling potential unauthorized modification of file targets, with CVSS 3.1 vect...
CVE-2026-18806
External control of file name or path vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute pardus-image-writer allows Removing Important Client Functionality. This issue affects pardus-image-writer: before 1.0.4...
EUVD-2026-52529
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network...
CVE-2026-66310
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally...
CVE-2026-66310
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally...
PT-2026-67555
Name of the Vulnerable Software and Affected Versions Microsoft Edge for Android affected versions not specified Description An issue exists where external control of a file name or path allows an unauthorized attacker to disclose information over a network. Recommendations At the moment, there i...