CVE-2026-96454: Missing Authorization

Pake turns a website into a desktop application built on Tauri. Every application it generates inherits two settings from the upstream template, and together they hand native functionality to untrusted web content. The first is in src-tauri/capabilities/default.json, which grants IPC access with...

CVE-2026-96275

A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system installs, the write happens as root. Two issues combine: files/extra is resolved via path operations that follow symlinks, and blob nam...

PT-2026-97348

Name of the Vulnerable Software and Affected Versions Flatpak affected versions not specified Description A flaw exists where a malicious SDK container can trigger arbitrary file writes on the host system. This occurs when a developer executes the command flatpak build-init --writable-sdk...

CVE-2026-96807: UNIX Symbolic Link (Symlink) Following

In Flatpak before 1.18.1, a malicious sandboxed app can replace /.var/app/$appid/.ld.so with a symlink, causing regenerateldcache to write files at an arbitrary location. The filenames and content are not attacker controlled, making this hard to exploit...

Linux Distros Unpatched Vulnerability : CVE-2026-96275

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On syste...

Linux Distros Unpatched Vulnerability : CVE-2026-96276

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - If a malicious SDK container declares an extension point with a crafted directory path, and a developer runs flatpak build-init --writable-sdk --sdk-extension...

Linux Distros Unpatched Vulnerability : CVE-2026-82331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper link resolution before file access 'link following' vulnerability in the tar source plugin of Apache BuildStream running on Python = 3.12, BuildStream ...

AlmaLinux 9 : podman (ALSA-2026:69961)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:69961 advisory. podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 podman: golang net/url: Denial of Service from quadratic...

RockyLinux 9 : podman (RLSA-2026:69961)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:69961 advisory. podman: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-33818 podman: golang net/url: Denial of Service from quadratic...

PT-2026-97415

Name of the Vulnerable Software and Affected Versions Flatpak versions prior to 1.18.1 Description A malicious sandboxed application can replace the /.var/app/$appid/.ld.so file with a symlink. This action causes the regenerate ld cache function to write files to an arbitrary location. Because th...

SUSE SLES12 Security Update : amazon-ssm-agent (SUSE-SU-2026:4286-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4286-1 advisory. - CVE-2026-56854: golang.org/x/crypto/ssh: source-address restriction bypassed in 5 callback families bsc1278681 - CVE-2026-56855:...

CVE-2026-96656: External Control of File Name or Path

Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH264Options is appended verbatim to x264's option string on every transcode. At startup, all .so files are run without signature, execute bit, or symbol check...

PT-2026-97406

Name of the Vulnerable Software and Affected Versions Plex Media Server versions prior to 1.43.3.10861 Description An administrative user can write arbitrary files that may be executed upon loading. This occurs because the TranscoderH264Options preference is appended verbatim to the x264 option...

GHSA-9VM9-PQXX-X83V KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join

Description KubeEdge keadm contains a path traversal vulnerability in the DecompressTarGz archive extraction function. Archive entry names were joined directly with the extraction destination without sufficient validation. A crafted tar.gz archive containing parent-directory components,...

EUVD-2026-84005

KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join...

KubeEdge: keadm DecompressTarGz path traversal enables arbitrary file write on Windows during edge node join

Description KubeEdge keadm contains a path traversal vulnerability in the DecompressTarGz archive extraction function. Archive entry names were joined directly with the extraction destination without sufficient validation. A crafted tar.gz archive containing parent-directory components,...

GHSA-7952-GX68-CJQR MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

Impact When reading a suitably crafted PRX or STX file, MPXJ can be made to write files to arbitrary locations in the file system. Patches This issue is addressed in MPXJ version 16.5.0. Workarounds Do not read PRX or STX files from untrusted sources...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the P3PRXFileReader and SureTrakSTXFileReader file extraction logic in the Primavera P3 PRX and SureTrak STX readers. An attacker can write files to arbitrary locations on the filesystem by supplying a crafted PR...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the P3PRXFileReader and SureTrakSTXFileReader file extraction logic in the Primavera P3 PRX and SureTrak STX readers. An attacker can write files to arbitrary locations on the filesystem by supplying a crafted PR...

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the P3PRXFileReader and SureTrakSTXFileReader file extraction logic in the Primavera P3 PRX and SureTrak STX readers. An attacker can write files to arbitrary locations on the filesystem by supplying a crafted PR...