CVE-2026-114609 fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content

fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's shared image loader automatically dereferences attacker-controlled HTTPS URLs and raw local paths supplied through FPDF.image, FPDF.writehtml HTML values, SVG or xlink:href values, and template image fields. This can cause outbou...

CVE-2026-114609

fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's shared image loader automatically dereferences attacker-controlled HTTPS URLs and raw local paths supplied through FPDF.image, FPDF.writehtml HTML values, SVG or xlink:href values, and template image fields. This can cause outbou...

CVE-2026-114609 fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content

fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's shared image loader automatically dereferences attacker-controlled HTTPS URLs and raw local paths supplied through FPDF.image, FPDF.writehtml HTML values, SVG or xlink:href values, and template image fields. This can cause outbou...

CVE-2026-114609 fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content

fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's shared image loader automatically dereferences attacker-controlled HTTPS URLs and raw local paths supplied through FPDF.image, FPDF.writehtml HTML values, SVG or xlink:href values, and template image fields. This can cause outbou...

Exploit for CVE-2026-106173

CVE‑2026‑106173 – FortiSIEM phQueryMaste...

CVE-2026-114606

draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulnerable to arbitrary local-file disclosure through the Electron main process's read-side IPC handlers. The readFile, getFileDrafts, getBkpFile, fileStat, isFileWritable, checkFileExists, and watchFil...

CVE-2026-104068

JetBackup plugin for WordPress before 3.1.24.10 contains a symlink-based arbitrary file write vulnerability that allows an authenticated WordPress administrator to write attacker-controlled file contents outside the intended restore destination during backup import and restore. Attackers can craf...

AgentZero XSS

RISK EVALUATION The Agent Zero Web UI before 1.15 does not correctly sanitize user-provided input in chat messages or file uploads. When Agent Zero reproduces content in the chat interface, any injected JavaScript is executed in the context of the victim’s authenticated Agent Zero Web UI...

CLSA-2026-1792689108 rpm: Fix of 3 CVEs

CVE-2026-95519: do not macro expand manifest entries and package paths in rpmgi before opening them - CVE-2026-95521: do not macro expand source package file basenames when installing or rebuilding a source RPM - CVE-2026-78367: do not macro expand the spec file name when parsing a spec, such as...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in nltk (CVE-2026-62383)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in nltk, due to a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypasses nltk.pathsec validation entirely. Nltk is used in our Speech runtimes. This vulnerability has been addressed...

CLSA-2026-1792688613 rpm: Fix of 3 CVEs

CVE-2026-95519: do not macro expand manifest entries and package paths in rpmgi before opening them - CVE-2026-95521: do not macro expand source package file basenames when installing or rebuilding a source RPM - CVE-2026-78367: do not macro expand the spec file name when parsing a spec, such as...

EUVD-2026-105303

virtualenv: Generated files can follow existing destination links...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangChain (CVE-2026-55443)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangChain, due to several LangChain components that resolve filesystem paths or expand search patterns that do not consistently confine the resolved path to the intended root directory. LangChain is used in our Spee...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Unrestricted Upload of File with Dangerous Type in pip (CVE-2026-3219)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Unrestricted Upload of File with Dangerous Type in pip. Pip is used in our Speech Service Runtimes. This vulnerability has been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-3219...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in pip (CVE-2026-1703)

Summary IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in pip due to a flaw that allows files to be extracted outside the installation directory when pip is installing and extracting a maliciously crafted wheel archive. Pip is used in our Speech Service Runtimes. This...

SUSE CVE-2026-85518

A flaw was found in OpenSCAP. When decomposing a Source DataStream SDS file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted...

SUSE CVE-2026-98682

In the Linux kernel, the following vulnerability has been resolved: smb: client: drain and invalidate before server-side copy/clone cifsfilecopychunkrange and the clone FICLONE path of cifsremapfilerange do not serialise the destination page cache against the server-side copy the way the other...

SUSE CVE-2026-98686

In the Linux kernel, the following vulnerability has been resolved: smb: client: discard post-EOF pagecache when extending a file via zero range smb3zerorange removed the pagecache only for the range being zeroed, so when it extends the file the folio straddling the old EOF - which may hold data...

CVE-2026-114606 draw.io Desktop: Arbitrary local-file read via read-side IPC (no blessed-path gate)

draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulnerable to arbitrary local-file disclosure through the Electron main process's read-side IPC handlers. The readFile, getFileDrafts, getBkpFile, fileStat, isFileWritable, checkFileExists, and watchFil...

CVE-2026-114606 draw.io Desktop: Arbitrary local-file read via read-side IPC (no blessed-path gate)

draw.io Desktop is the official Electron build of draw.io. Prior to 31.4.4, draw.io Desktop is vulnerable to arbitrary local-file disclosure through the Electron main process's read-side IPC handlers. The readFile, getFileDrafts, getBkpFile, fileStat, isFileWritable, checkFileExists, and watchFil...