CVE-2026-85316

CVE-2026-85316 — camel-platform-http: unintended proxy mode from a path prefix Runnable proof-of-concept reproducer for the Apache Camel vulnerability where camel-platform-http decided whether an endpoint ran in proxy mode by testing whether its configured path started with the string proxy, rath...

Exploit for CVE-2026-95628

CVE-2026-95628 — camel-docling: validatePathSafety did not r...

BIT-VIRTUALENV-2026-113715 virtualenv: Venv configuration readback can reinterpret path boundaries

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the stdlib venv creator reads generated pyvenv.cfg with str.splitlines and merges parsed keys over virtualenv's selected configuration. An untrusted caller who influences the destination pathname can include...

BIT-RCLONE-2026-116195 Rclone before 1.75.2 Path Traversal via translateLink .rclonelink Suffix Trim

Rclone before 1.75.2 contains a path traversal vulnerability in the local backend's translateLink function, which trims the .rclonelink suffix from a path after the containment check, so a name can resolve outside the destination root. Attackers can plant a directory named ...rclonelink in a sour...

BIT-RCLONE-2026-116191 Rclone before 1.75.2 Path Traversal via serve webdav MKCOL

Rclone before 1.75.2 contains a path traversal vulnerability in serve webdav that allows unauthenticated attackers to write above the served root by sending an unvalidated '..' path component. Attackers can send MKCOL /.. to plant a VFS node, then PUT, MOVE, COPY, or MKCOL to create, overwrite, o...

BIT-NODE-MIN-2026-106073

A flaw in Node.js Permission Model filesystem enforcement leaves fs.realpathSync without the required read permission checks. This is an incomplete fix of CVE-2026-21715, which only covered fs.realpathSync.native. As a result, code running under --permission with restricted --allow-fs-read can...

BIT-NODE-2026-106073

A flaw in Node.js Permission Model filesystem enforcement leaves fs.realpathSync without the required read permission checks. This is an incomplete fix of CVE-2026-21715, which only covered fs.realpathSync.native. As a result, code running under --permission with restricted --allow-fs-read can...

Security update for rust-keylime

This update for rust-keylime fixes the following issue: CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc1287921...

SUSE-SU-2026:4931-1 Security update for rust-keylime

This update for rust-keylime fixes the following issue: - CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 - CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc128792...

Security update for rust-keylime

This update for rust-keylime fixes the following issue: CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc1287921...

SUSE-SU-2026:4930-1 Security update for rust-keylime

This update for rust-keylime fixes the following issue: - CVE-2026-115905: zip: security control bypass via parser differential between central directory and local headers bsc1287921 - CVE-2026-115906: zip: authentication bypass in AES encrypted entries due to improper HMAC verification bsc128792...

CVE-2026-116673

A flaw was found in systeminformation. The library fails to properly validate user-supplied network interface names when querying network statistics on Linux systems. A local attacker who can control this parameter and create symbolic links on the local filesystem can exploit this path traversal...

CVE-2026-99174

A flaw was found in the Linux kernel's ext4 file system. A local user could exploit a race condition during concurrent file path lookup and filesystem unmount operations. When resolving a symbolic link as the filesystem's last mount reference is released, the kernel may dereference a null pointer...

CVE-2026-118176

A flaw was found in Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Thunderbird's check that prevents mailbox: URLs from accessing files on remote Windows network shares could be bypassed using extended-length UNC paths. Displaying a specially crafted email...

CVE-2026-114714

A flaw was found in Roundcube Webmail. When using the squirrelmailusercopy plugin with a file-based backend, the application constructs file paths from user login names without properly sanitizing path separators. An authenticated remote attacker can exploit this path traversal vulnerability by...

CVE-2026-113617 Automated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal

The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before using it to read and delete files, allowing users with minimal permissions, such as subscribers, to read arbitrary files including ones containing the database credentials and...

CVE-2026-113617 Automated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal

The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before using it to read and delete files, allowing users with minimal permissions, such as subscribers, to read arbitrary files including ones containing the database credentials and...

CVE-2026-113617

The Automated Import Products to Cart WordPress plugin (versions prior to 1.0.4 ) is vulnerable to arbitrary file read and deletion due to a path traversal flaw (CWE-22). The application fails to sanitize user-supplied file paths before using them in file system operations. This allows users with...

CVE-2026-98980

A flaw was found in the Linux kernel. A race condition during reference-based path lookup allows a local user to access files hidden beneath mount points, resulting in information disclosure. When an overmounted file or directory is unlinked or removed while another process traverses the path, th...

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...