CVE-2026-7120

@fastify/static evaluates the allowedPath callback before normalizing dot segments and duplicate path separators in the pathname used for file resolution. Versions up to and including 10.1.1 are affected. An unauthenticated attacker can bypass allowedPath restrictions by requesting equivalent...

openjdk: Enhance TLS certificate handling

Vulnerability in Oracle Java SE component: JSSE. Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Difficult to exploit vulnerability allow...

Progress Kemp Flowmon - Command Injection

In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified. An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands. id: CVE-2024-2389 info: nam...

WordPress File Upload <= 4.24.11 - Arbitrary File Read

The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.24.11 via wfufiledownloader.php. This makes it possible for unauthenticated attackers to read or delete files outside of the originally intended directory. Successful exploitatio...

Kentico Xperience 13 CMS - Staging Service Authentication Bypass (WT-2025-0006)

An authentication bypass vulnerability in Kentico Xperience allows authentication bypass via the Staging Sync Server component password handling for the server defined None type. Authentication bypass allows an attacker to control administrative objects.This issue affects Xperience through...

ROOT-OS-DEBIAN-12-CVE-2026-46285 CVE-2026-46285 in rootio-linux - Patched by Root

Root has patched CVE-2026-46285 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-31588 CVE-2026-31588 in rootio-linux - Patched by Root

Root has patched CVE-2026-31588 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-26807 CVE-2024-26807 in rootio-linux - Patched by Root

Root has patched CVE-2024-26807 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-24864 CVE-2024-24864 in rootio-linux - Patched by Root

Root has patched CVE-2024-24864 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-53159 CVE-2026-53159 in rootio-linux - Patched by Root

Root has patched CVE-2026-53159 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-31412 CVE-2026-31412 in rootio-linux - Patched by Root

Root has patched CVE-2026-31412 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2019-16232 CVE-2019-16232 in rootio-linux - Patched by Root

Root has patched CVE-2019-16232 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-31458 CVE-2026-31458 in rootio-linux - Patched by Root

Root has patched CVE-2026-31458 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-37870 CVE-2025-37870 in rootio-linux - Patched by Root

Root has patched CVE-2025-37870 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-46231 CVE-2026-46231 in rootio-linux - Patched by Root

Root has patched CVE-2026-46231 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2026-23318 CVE-2026-23318 in rootio-linux - Patched by Root

Root has patched CVE-2026-23318 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-68786 CVE-2025-68786 in rootio-linux - Patched by Root

Root has patched CVE-2025-68786 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2024-53095 CVE-2024-53095 in rootio-linux - Patched by Root

Root has patched CVE-2024-53095 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2023-53336 CVE-2023-53336 in rootio-linux - Patched by Root

Root has patched CVE-2023-53336 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...

ROOT-OS-DEBIAN-12-CVE-2025-38645 CVE-2025-38645 in rootio-linux - Patched by Root

Root has patched CVE-2025-38645 in the rootio-linux package for Root:Debian:12. Multiple fixed versions available...