71073 matches found
CVE-2026-77110: Improper Limitation of a Pathname to a Restricted Directory
Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to access unauthorized files or directories outside the...
PT-2026-95346
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failed wwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...
CVE-2026-79904: Improper Limitation of a Pathname to a Restricted Directory
Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intende...
CVE-2026-78624: Improper Limitation of a Pathname to a Restricted Directory
The Okta Access Gateway backup restore function does not validate the filename embedded in an encrypted backup payload. This results in writing file contents to unintended locations on the appliance filesystem...
CVE-2026-74859: Improper Limitation of a Pathname to a Restricted Directory
The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...
CVE-2026-47680: Relative Path Traversal
The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...
PT-2026-88002
Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-87044
DataCube contained a path traversal issue affecting security feature enforcement. Software customers upgrade to resolved maintenance release. Update Content Extractor and Index Store...
PT-2026-87310
Name of the Vulnerable Software and Affected Versions Microsoft Windows Search Component affected versions not specified Description An absolute path traversal issue exists in the Microsoft Windows Search Component. This flaw allows an authorized attacker to elevate privileges locally on the...
PT-2026-87209
Name of the Vulnerable Software and Affected Versions Windows PowerShell versions prior to September 2026 Patch Tuesday Description An improper limitation of a pathname to a restricted directory, known as path traversal, allows an unauthorized attacker to bypass a security feature over a network....
PT-2026-87974
Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...
EulerOS 2.0 SP12 : glib2 (EulerOS-SA-2026-3336)
According to the versions of the glib2 packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the gdatetimegetymd function in the glib/gdatetime.c file when an...
Linux Distros Unpatched Vulnerability : CVE-2026-74859
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can...
NewStart CGSL MAIN 7.02 : perl-Archive-Tar Multiple Vulnerabilities (NS-SA-2026-0090)
The remote NewStart CGSL host, running version MAIN 7.02, has perl-Archive-Tar packages installed that are affected by multiple vulnerabilities: - Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory. makespecialfile passes...
EulerOS 2.0 SP12 : spice-vdagent (EulerOS-SA-2026-3387)
According to the versions of the spice-vdagent packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files ...
EulerOS 2.0 SP12 : spice-vdagent (EulerOS-SA-2026-3312)
According to the versions of the spice-vdagent packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files ...
EulerOS 2.0 SP12 : perl-Archive-Tar (EulerOS-SA-2026-3365)
According to the versions of the perl-Archive-Tar packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory...
EulerOS 2.0 SP12 : sssd (EulerOS-SA-2026-3314)
According to the versions of the sssd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability, where a memory...
CVE-2026-86079: Improper Limitation of a Pathname to a Restricted Directory
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Elasticsearch and ElasticSecurity nodes interpolated workflow-controlled index and document identifiers directly into REST request paths. An identifier containing path separators or dot segments could...