CVE-2026-67185-Unauthenticated-Path-Traversal-Allows-Arbitrary-File-Read-TinyWeb-

Бюллетень безопасности: Неаутентифицированный обход каталога позволяет произвольное чтение файлов TinyWeb Присвоенный идентификатор CVE: CVE-2026-67185 Краткое описание TinyWeb формирует путь к обслуживаемому файлу, соединяя корневой каталог веб-сервера с URL запроса ровно так, как он поступил, б...

EUVD-2026-67327

The static resource interface /api/static/deployKey/ of Yu AI Code Mother v4.3 is vulnerable to path traversal. The user-controlled path is concatenated to the preview root directory without any normalization, allowing anonymous attackers to read files outside the preview root...

CVE-2026-75337

The static resource interface /api/static/deployKey/ of Yu AI Code Mother v4.3 is vulnerable to path traversal. The user-controlled path is concatenated to the preview root directory without any normalization, allowing anonymous attackers to read files outside the preview root...

CVE-2026-75337

The static resource interface /api/static/deployKey/ of Yu AI Code Mother v4.3 is vulnerable to path traversal. The user-controlled path is concatenated to the preview root directory without any normalization, allowing anonymous attackers to read files outside the preview root...

CVE-2026-75337

The static resource interface /api/static{deployKey}/ of Yu AI Code Mother v4.3 is vulnerable to a path traversal attack. The root cause is the lack of normalization when concatenating user-controlled paths to the preview root directory. This flaw allows anonymous attackers to read sensitive file...