CVE-2026-16137 Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

EUVD-2026-60198

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

CVE-2026-16137

Progress ShareFile Storage Zones Controller v5.12.5 and below is vulnerable to path traversal via the resumable upload initiation endpoint, where unsanitized upload filenames allow authenticated users with zone credentials to write arbitrary files to any application-service-account-writable path,...

CVE-2026-16139

Progress ShareFile Storage Zones Controller ≤5.12.5 and ≤6.0.2 suffer path-traversal in the download preparation flow, allowing an authenticated zone admin to write files outside the intended directory. RCE is confirmed in v5 but unconfirmed in v6. No patch version is specified in the provided do...

CVE-2026-16139

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

CVE-2026-16139 Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

EUVD-2026-60196

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

EUVD-2026-60194

extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the destination, followed by a regular file - writes through t...

CVE-2026-19693

extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the destination, followed by a regular file - writes through t...

CVE-2026-19693 extract-zip arbitrary file write outside the destination directory via a symlink at the final path component

extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the destination, followed by a regular file - writes through t...

CVE-2026-19693 extract-zip arbitrary file write outside the destination directory via a symlink at the final path component

extract-zip through 2.0.1 containment-checks only the parent directory of each archive entry and never the entry's own final path component, so an archive containing two entries with identical names - a symlink whose target is outside the destination, followed by a regular file - writes through t...

CVE-2026-19693

extract-zip (Node.js npm package, versions through 2.0.1) fails to validate the final path component of each archive entry, only checking the parent directory. A crafted zip archive with two identically-named entries—one a symlink pointing outside the destination, the second a regular file—causes...

CVE-2026-74884

opensslencrypt versions before 1.4.0 contain a path traversal vulnerability in the issafepath method where the pluginid parameter is not sanitized before constructing the plugin config directory path. Attackers can declare a malicious pluginid containing path traversal sequences like '../' to...

CVE-2026-74872

opensslencrypt versions before 1.4.0 contain an arbitrary code execution vulnerability in the Whirlpool hash implementation that uses broad glob patterns to load .so modules without integrity verification. Attackers can place malicious .so files matching the whirlpoolpy313.so pattern in...

CVE-2026-74798

SiYuan kernel before v3.7.4 contains a path traversal vulnerability in the databaseclean MCP tool. The tool performs only an empty-string check on the id parameter before passing it to RemoveUnusedAttributeView kernel/model/attributeview.go, which builds a filesystem path via filepath.Join withou...

EUVD-2026-60103

opensslencrypt versions before 1.4.0 contain a path traversal vulnerability in the issafepath method where the pluginid parameter is not sanitized before constructing the plugin config directory path. Attackers can declare a malicious pluginid containing path traversal sequences like '../' to...

CVE-2026-74884 openssl_encrypt before 1.4.0 Path Traversal via plugin_id

opensslencrypt versions before 1.4.0 contain a path traversal vulnerability in the issafepath method where the pluginid parameter is not sanitized before constructing the plugin config directory path. Attackers can declare a malicious pluginid containing path traversal sequences like '../' to...

CVE-2026-74884

The WordPress plugin openssl_encrypt (versions before 1.4.0) has a path traversal flaw in the _is_safe_path method. The unsanitized plugin_id parameter is used to build a plugin config directory path, allowing attackers to inject ../ sequences and read arbitrary directories outside the intended p...

CVE-2026-74884 openssl_encrypt before 1.4.0 Path Traversal via plugin_id

opensslencrypt versions before 1.4.0 contain a path traversal vulnerability in the issafepath method where the pluginid parameter is not sanitized before constructing the plugin config directory path. Attackers can declare a malicious pluginid containing path traversal sequences like '../' to...

CVE-2026-74798 SiYuan kernel Path Traversal via database_clean MCP tool

SiYuan kernel before v3.7.4 contains a path traversal vulnerability in the databaseclean MCP tool. The tool performs only an empty-string check on the id parameter before passing it to RemoveUnusedAttributeView kernel/model/attributeview.go, which builds a filesystem path via filepath.Join withou...