CVE-2026-108140

This vulnerability allows an authenticated user with the Restore Operator role to perform a relative path traversal attack. If the user also controls the contents of a backed-up NAS share , they can write attacker-controlled files to an arbitrary path on the backup server. No specific software ve...

CVE-2022-24372

Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary files via a symbolic link to the root directory of a NAS SMB share...