EUVD-2026-90426

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/filebrowser.py:FileBrowser.savefileb64. The savefileb64 method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks...

CVE-2026-51568

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in writetextfile...

CVE-2026-51570

modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in inserttextfile...

EUVD-2026-90427

modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in inserttextfile...

PT-2026-103592

Name of the Vulnerable Software and Affected Versions Apeos C4571 versions prior to 1.1.4 Apeos C3567 version 1.1.3 FUJIFILM and Sharp multifunction printers affected versions not specified Description A path traversal issue exists in the web management interface of several multifunction devices...

CVE-2026-102116: Improper Limitation of a Pathname to a Restricted Directory

-A weakness could have allowed an authenticated Kiteworks Email Protection Gateway administrator to write a file outside its intended location and cause the application to execute it, potentially resulting in remote code execution as the underlying service account...

Important: rsync security, bug fix, and enhancement update

The rsync utility enables the users to copy and synchronize files locally or across a network. Synchronization with rsync is fast because rsync only sends the differences in files over the network instead of sending whole files. The rsync utility is also used as a mirroring tool. Security Fixes:...

PT-2026-103278

Name of the Vulnerable Software and Affected Versions oc-mirror affected versions not specified Red Hat Assisted Installer for OpenShift Container Platform affected versions not specified OpenShift Container Platform affected versions not specified Description A path traversal and arbitrary file...

CVE-2026-97244: Path Traversal: '.../...//'

Contributor Path Traversal in Creator LMS = 1.2.19 versions...

CVE-2026-51570: Improper Limitation of a Pathname to a Restricted Directory

modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in inserttextfile...

CVE-2026-51568: Improper Limitation of a Pathname to a Restricted Directory

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in writetextfile...

CVE-2026-13224: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in the Fireware OS WebUI management agent allows an authenticated administrator to read or list arbitrary files on the local filesystem by sending a specially crafted management request...

CVE-2026-103088: Path Traversal: '../filedir'

Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, the path-containment fix for CVE-2026-63490 validates template locations as raw percent-encoded strings, whereas the template file is opened through a URL handler that percent-decodes the path. In a...

CVE-2026-102843: Improper Limitation of a Pathname to a Restricted Directory

A security flaw has been discovered in gedelumbung HospitalManagement up to c2d45543789a3887067d3915f69d44cfc2cf76a8. This affects the function hapus of the file application/modules/admin/controllers/datagaleri.php of the component Endpoint. Performing a manipulation of the argument gbr results i...

CVE-2026-10739: Relative Path Traversal

Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a local IPC named pipe...

CVE-2026-55224: Improper Limitation of a Pathname to a Restricted Directory

MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other business applications. Prior to version 3.2.0-alpha.2, the app-store plugin service concatenates...

CVE-2026-102119: Improper Limitation of a Pathname to a Restricted Directory

A path traversal weakness in an optional, non-default administrative feature allowed an authenticated administrator to move files to unintended locations outside the feature's designated directory. This could potentially be leveraged to execute arbitrary code on the underlying system...

CentOS Linux 8.5 [TuxCare] Security Update: glib2 / glib2-devel / glib2-doc / glib2-fam / glib2-static / etc Multiple Vulnerabilities (CENTOS8.5:CLSA-2026:1783079861)

The CentOS Linux 8.5 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.5:CLSA-2026:1783079861 advisory. - A flaw was found in GLib. An off-by-one error can occur in the gkeyfilegetlocalestringlist function in the gkeyfile.c file when...

AlmaLinux 9.6 [TuxCare] Security Update: rsync / rsync-daemon / rsync-rrsync Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1789783256)

The AlmaLinux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789783256 advisory. - rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended...

CentOS Linux 7 [TuxCare] Security Update: emacs-git / emacs-git-el / git / git-all / git-bzr / git-cvs / etc (CENTOS7:CLSA-2024:1714728645)

The CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2024:1714728645 advisory. - Git, a revision control system, is vulnerable to path traversal prior to versions 2.39.2, 2.38.4, 2.37.6, 2.36.5, 2.35.7, 2.34.7, 2.33.7, 2.32....