CVE-2026-104982

A flaw was found in Xreader. A remote attacker could exploit this vulnerability by enticing a user to open a specially crafted electronic publication EPUB document. Due to improper path sanitization in the EPUB file handler, the application is susceptible to path traversal, potentially leading to...

Path Traversal

Apache MINA SSHD is vulnerable to path traversal. The vulnerability is due to insufficient path validation on Windows, where the sshd-git component fails to properly restrict file system paths and an authenticated remote user can craft directory traversal sequences to access git repositories...

Improper Limitation Of A Pathname To A Restricted Directory

Werkzeug is vulnerable to Improper Limitation of a Pathname to a Restricted Directory. The vulnerability is due to safejoin failing to remove an empty NTFS Alternate Data Stream ADS marker before checking Windows device names, which allows an attacker to request a path ending in NUL: and cause th...

Path Traversal

Docling is vulnerable to Path Traversal. The vulnerability is due to improper validation and confinement of attacker-controlled xlink:href filesystem paths when processing ODF images, which allows an attacker to access arbitrary readable files and potentially disclose their contents through...

CVE-2026-105221

A flaw was found in gist. The utility completely disables Transport Layer Security TLS certificate verification when establishing HTTPS connections. An on-path attacker can exploit this flaw by presenting an arbitrary certificate to intercept, read, and manipulate network traffic. This can lead t...

Exploit for CVE-2026-105221

abraxaslabs.tech · github.com/abraxas ·&...

CVE-2026-49049

CVE-2026-49049 Vulnerability Analysis: Unauthenticated Arbitrary File Write in JoomShaper Helix3 Joomla This repository contains materials, technical analysis, and a Proof of Concept PoC for the critical vulnerability CVE-2026-49049 found in the outdated template framework Helix3 by JoomShaper fo...

CLEANSTART-2026-YE75739 Previously, resolving relative paths containing parent directory ('

Security vulnerability affects the temporal-server package. Previously, resolving relative paths containing parent directory '...

CLEANSTART-2026-IV86887 Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is config...

Security vulnerability affects the rundeck package. Applications using Spring Framework's FreeMarker integration may be vulnerable to a path traversal attack when a controller returns a view name derived from untrusted input and FreeMarker is configured to resolve templates through...

PT-2026-106725

Name of the Vulnerable Software and Affected Versions lrzsz versions prior to 0.13.0 Description The lrz receive utility contains a path traversal issue in its restricted mode. This occurs because the checkpath function in src/lrz.c only filters out ../ sequences when not built with the...

Fortinet FortiMail Path Traversal / NULL Byte Arbitrary File Write (FG-IR-26-175)

The version of FortiMail installed on the remote host is affected by a path traversal vulnerability as referenced in the FG-IR-26-175 advisory. - An improper limitation of a pathname to a restricted directory 'Path Traversal' combined with an improper neutralization of NULL byte or NULL character...

Linux Distros Unpatched Vulnerability : CVE-2026-98255

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to th...

CVE-2026-105840: Improper Limitation of a Pathname to a Restricted Directory

lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current directory using absolute pathnames. Because checkpath in src/lrz.c only rejects '../' sequences unless built with...

CVE-2026-106493: Improper Limitation of a Pathname to a Restricted Directory

Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A principal able to create or rename objects in a configured Azure Blob Storage or AWS S3 catalog source could cause catalog descriptors to b...

PT-2026-107278

Name of the Vulnerable Software and Affected Versions Backstage versions prior to 1.54.6 Description Cloud storage catalog providers do not sufficiently validate object paths. A principal with permissions to create or rename objects in a configured AWS S3 or Azure Blob Storage catalog source can...

CVE-2026-106491: Improper Input Validation

Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-backend. An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to ...

Security Advisory 0189

Security Advisory 0189 . CSAF PDF Date: October 6, 2026 Revision | Date | Changes ---|---|--- 1.0 | October 6, 2026 | Initial release 1.1 | October 13, 2026 | Updated Resolution section to include the 2026.3.0 release Description All CVEs covered in this advisory affect platforms running...

PT-2026-107203

🚨 CVE-2026-79805 CVSS 9.8 Critical A path traversal flaw in HPE ClearPass Policy Manager allows remote attackers to read and overwrite sensitive OS files, leading to system compromise. https://t.co/AuVFW8JRTI https://t.co/jsTxIa6pL3...

CVE-2026-106486: Improper Limitation of a Pathname to a Restricted Directory

Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-module-bitbucket-server, the Bitbucket pull-request Scaffolder actions did not sufficiently validate...

PT-2026-107267

Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-bitbucket-cloud versions prior to 0.3.10 @backstage/plugin-scaffolder-backend-module-bitbucket-server versions prior to 0.2.25 Description Bitbucket pull-request Scaffolder actions fail to sufficient...