Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2026/03/06 1:34 a.m.•21 views

CVE-2026-28427

OpenDeck is Linux software for your Elgato Stream Deck. Prior to 2.8.1, the service listening on port 57118 serves static files for installed plugins but does not properly sanitize path components. By including ../ sequences in the request path, an attacker can traverse outside the intended...

5.9CVSS6AI score0.00508EPSS
SaveExploits1References1
NVD
NVD
•added 2026/03/04 8:16 p.m.•25 views

CVE-2026-28427

OpenDeck is Linux software for your Elgato Stream Deck. Prior to 2.8.1, the service listening on port 57118 serves static files for installed plugins but does not properly sanitize path components. By including ../ sequences in the request path, an attacker can traverse outside the intended...

7.5CVSS0.00508EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/03/04 7:30 p.m.•56 views

CVE-2026-28427 OpenDeck affected by path traversal allows arbitrary file read

OpenDeck is Linux software for your Elgato Stream Deck. Prior to 2.8.1, the service listening on port 57118 serves static files for installed plugins but does not properly sanitize path components. By including ../ sequences in the request path, an attacker can traverse outside the intended...

5.9CVSS0.00508EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/03/04 7:30 p.m.•13 views

EUVD-2026-9494

OpenDeck is Linux software for your Elgato Stream Deck. Prior to 2.8.1, the service listening on port 57118 serves static files for installed plugins but does not properly sanitize path components. By including ../ sequences in the request path, an attacker can traverse outside the intended...

5.9CVSS6AI score0.00508EPSS
SaveExploits1References2
OSV
OSV
•added 2026/03/04 7:30 p.m.•15 views

CVE-2026-28427 OpenDeck affected by path traversal allows arbitrary file read

OpenDeck is Linux software for your Elgato Stream Deck. Prior to 2.8.1, the service listening on port 57118 serves static files for installed plugins but does not properly sanitize path components. By including ../ sequences in the request path, an attacker can traverse outside the intended...

5.9CVSS5.8AI score
SaveExploits0References4
attackerkb
attackerkb
•added 2026/03/04 7:30 p.m.•9 views

CVE-2026-28427

OpenDeck is Linux software for your Elgato Stream Deck. Prior to 2.8.1, the service listening on port 57118 serves static files for installed plugins but does not properly sanitize path components. By including ../ sequences in the request path, an attacker can traverse outside the intended...

5.9CVSS6AI score0.00508EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/03/04 12:00 a.m.•20 views

PT-2026-23044

Name of the Vulnerable Software and Affected Versions OpenDeck versions prior to 2.8.1 Description OpenDeck is Linux software for the Elgato Stream Deck. The service listening on port 57118 serves static files for installed plugins without proper path sanitization. An attacker can use '../'...

5.9CVSS6.1AI score0.00508EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/03/04 12:00 a.m.•3 views

CVE-2026-28427: Improper Limitation of a Pathname to a Restricted Directory

OpenDeck is Linux software for your Elgato Stream Deck. Prior to 2.8.1, the service listening on port 57118 serves static files for installed plugins but does not properly sanitize path components. By including ../ sequences in the request path, an attacker can traverse outside the intended...

7.5CVSS5.9AI score0.00508EPSS
SaveExploits1References1
Rows per page
Query Builder