52569 matches found
EUVD-2026-60233
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers with the OpenAPI description consumed by Kiota can supply a file reference that resolves outside the manifest package e.g. ../../../../etc/passwd, an absolute path, or a file:// /...
CVE-2026-73851
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers with the OpenAPI description consumed by Kiota can supply a file reference that resolves outside the manifest package e.g. ../../../../etc/passwd, an absolute path, or a file:// /...
CVE-2026-73851 Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers with the OpenAPI description consumed by Kiota can supply a file reference that resolves outside the manifest package e.g. ../../../../etc/passwd, an absolute path, or a file:// /...
CVE-2026-73851
CVE-2026-73851 is a path traversal vulnerability in Microsoft Kiota , an OpenAPI-based HTTP client code generator. When Kiota generates AI plugin manifests, the static_template.file reference written into the manifest is resolved by the AI host relative to the plugin package. The IsSafeFileRefere...
CVE-2026-73851 Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers with the OpenAPI description consumed by Kiota can supply a file reference that resolves outside the manifest package e.g. ../../../../etc/passwd, an absolute path, or a file:// /...
CVE-2026-73851 Kiota: Path traversal in generated plugin manifest static_template.file reference (percent-encoding bypass)
Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.34.0, an attacker who controls or tampers with the OpenAPI description consumed by Kiota can supply a file reference that resolves outside the manifest package e.g. ../../../../etc/passwd, an absolute path, or a file:// /...
CVE-2026-59909
Dell ObjectScale, versions prior to 4.3.0.1, contains a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...
CVE-2026-19693
extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the destination, followed by a regular file - writes through t...
CVE-2026-56089
Dell ObjectScale, versions prior to 4.3.0.1, contains a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-16137
In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...
CVE-2026-16139
In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...
UBUNTU-CVE-2026-19693
extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the destination, followed by a regular file - writes through t...
CVE-2026-56089
Dell ObjectScale, versions prior to 4.3.0.1, contains a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...
EUVD-2026-60204
Dell ObjectScale, versions prior to 4.3.0.1, contains a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...
CVE-2026-56089
Dell ObjectScale (versions prior to 4.3.0.1) has a Path Traversal vulnerability. A low-privileged local attacker can exploit it to read arbitrary files, causing information disclosure . CVSS 3.3 (Low) limits impact to confidentiality only. Dell's DSA-2026-328 advisory documents the fix; upgrading...
CVE-2026-56089
Dell ObjectScale, versions prior to 4.3.0.1, contains a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure...
EUVD-2026-60202
Dell ObjectScale, versions prior to 4.3.0.1, contains a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...
CVE-2026-59909
Dell ObjectScale, versions prior to 4.3.0.1, contains a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering...
CVE-2026-59909
Dell ObjectScale versions before 4.3.0.1 have a Path Traversal flaw exploitable by a low-privileged local attacker, enabling information tampering (CVSS 7.1, HIGH). Upgrade to 4.3.0.1 or later; Dell advisory DSA-2026-328 provides details. No exploitation evidence provided.
CVE-2026-16137 Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller
In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...