Lucene search
+L

116220 matches found

OSV
OSV
added 2026/08/24 4:12 p.m.21 views

CVE-2026-19685 Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)

NetworkManager did not apply the privateuser restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise 802.1X connection profile's CA path at an...

7.1CVSS5.5AI score
SaveExploits0References8
EUVD
EUVD
added 2026/08/24 4:12 p.m.11 views

EUVD-2026-64957

NetworkManager did not apply the privateuser restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise 802.1X connection profile's CA path at an...

7.1CVSS5.4AI score0.00136EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/24 4:12 p.m.38 views

CVE-2026-19685 Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)

NetworkManager did not apply the privateuser restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise 802.1X connection profile's CA path at an...

7.1CVSS0.00136EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/08/24 4:12 p.m.10 views

CVE-2026-19685 Networkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)

NetworkManager did not apply the privateuser restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise 802.1X connection profile's CA path at an...

7.1CVSS5.3AI score0.00154EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/24 4:12 p.m.41 views

CVE-2026-66906 Apache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir

Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem...

0.0053EPSS
SaveExploits1References1
EUVD
EUVD
added 2026/08/24 4:12 p.m.10 views

EUVD-2026-64956

Relative path traversal vulnerability in Apache Camel Azure Storage Blob component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem...

5.6AI score0.0053EPSS
SaveExploits1References1
CVE
CVE
added 2026/08/24 4:12 p.m.45 views

CVE-2026-66906

CVE-2026-66906 is a relative path traversal (CWE-22) in the camel-azure-storage-blob component of Apache Camel, rated CVSS 9.1 (Critical) . The downloadBlobToFile operation joins the fileDir endpoint option with the remote blob name verbatim—without lexical normalization or a containment check—so...

9.1CVSS5.5AI score0.0053EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2026/08/24 4:11 p.m.42 views

CVE-2026-60093 Apache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir

Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to t...

0.00257EPSS
SaveExploits1References1
OSV
OSV
added 2026/08/24 4:11 p.m.8 views

CVE-2026-60093 Apache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir

Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to t...

5.5CVSS5.7AI score
SaveExploits0References5
EUVD
EUVD
added 2026/08/24 4:11 p.m.9 views

EUVD-2026-64954

Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to t...

5.6AI score0.00257EPSS
SaveExploits1References1
CVE
CVE
added 2026/08/24 4:11 p.m.29 views

CVE-2026-60093

CVE-2026-60093 is a relative path traversal (CWE-22) in the Apache Camel camel-azure-storage-datalake component (versions 4.0.0–4.21.x, fixed in 4.14.9 / 4.18.4 / 4.22.0 ). The downloadToFile operation joined the configured fileDir with the remote file name from Azure Data Lake Gen2 without lexic...

5.5CVSS5.5AI score0.00257EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/08/24 4:11 p.m.5 views

CVE-2026-60093 Apache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir

Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to t...

5.5AI score0.00257EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2026/08/24 4:07 p.m.10 views

CVE-2026-77914 rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpoint

rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames containing directory traversal sequences to the export download endpoint. Attackers can manipulate the filename parameter with traversal...

7.1CVSS5.5AI score0.00536EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/24 4:07 p.m.33 views

CVE-2026-77914 rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpoint

rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames containing directory traversal sequences to the export download endpoint. Attackers can manipulate the filename parameter with traversal...

7.1CVSS0.00536EPSS
SaveExploits0References3
EUVD
EUVD
added 2026/08/24 4:07 p.m.9 views

EUVD-2026-64952

rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames containing directory traversal sequences to the export download endpoint. Attackers can manipulate the filename parameter with traversal sequences t...

7.1CVSS5.7AI score0.00536EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/24 4:07 p.m.20 views

CVE-2026-77914 rConfig Core 8.0.0 < 8.2.13 Core Path Traversal via Export Download Endpoint

rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames containing directory traversal sequences to the export download endpoint. Attackers can manipulate the filename parameter with traversal...

7.1CVSS5.8AI score
SaveExploits0References6
CVE
CVE
added 2026/08/24 4:07 p.m.15 views

CVE-2026-77914

rConfig versions prior to 8.2.13 contain a path traversal vulnerability in the export download endpoint . An authenticated attacker can manipulate the filename parameter with directory traversal sequences to escape the intended export directory and read arbitrary files accessible to the applicati...

7.1CVSS5.5AI score0.00536EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/24 3:59 p.m.9 views

CVE-2026-19685

NetworkManager did not apply the privateuser restriction to the 802-1x.ca-path and phase2-ca-path directory-valued connection properties. This incomplete fix for CVE-2025-9615 allows an unprivileged local user to point a private WPA-Enterprise 802.1X connection profile's CA path at an...

9.8CVSS5.3AI score0.00136EPSS
SaveExploits0References6
GithubExploit
GithubExploit
added 2026/08/24 3:42 p.m.21 views

Exploit for CVE-2026-60093

CVE-2026-60093 — camel-azure-storage-datalake downloadToFile...

6AI score0.00257EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2026/08/24 3:22 p.m.8 views

CVE-2026-71364

A path traversal vulnerability was found in AWX's project archive extraction. The projectarchive action plugin extracts zip and tar archive members by joining the project directory path with the member filename without performing path normalization, boundary validation, or rejecting directory...

7.2CVSS6.6AI score0.01202EPSS
SaveExploits0References3
Rows per page
Query Builder