7 matches found
CVE-2026-25825
An issue was discovered in Keyfactor SignServer before 7.6.0. The output file to which SignerStatusReportWorker logs the report can be set to any path, even one that points to a file that already exists. This gives a user with admin access the possibility to write files in arbitrary directories i...
CVE-2026-25825: Use of Incorrectly-Resolved Name or Reference
An issue was discovered in Keyfactor SignServer before 7.6.0. The output file to which SignerStatusReportWorker logs the report can be set to any path, even one that points to a file that already exists. This gives a user with admin access the possibility to write files in arbitrary directories i...
CVE-2026-25825
An arbitrary file write vulnerability exists in Keyfactor SignServer versions prior to 7.6.0 . The SignerStatusReportWorker component allows the output file path for logged reports to be set to any arbitrary location, including paths for files that already exist. This enables a user with admin ac...
EUVD-2026-78627
An issue was discovered in Keyfactor SignServer before 7.6.0. The output file to which SignerStatusReportWorker logs the report can be set to any path, even one that points to a file that already exists. This gives a user with admin access the possibility to write files in arbitrary directories i...
CVE-2026-25825
An issue was discovered in Keyfactor SignServer before 7.6.0. The output file to which SignerStatusReportWorker logs the report can be set to any path, even one that points to a file that already exists. This gives a user with admin access the possibility to write files in arbitrary directories i...
PT-2026-92026
Name of the Vulnerable Software and Affected Versions Keyfactor SignServer versions prior to 7.6.0 Description An issue exists where the output file used by the SignerStatusReportWorker for logging reports can be configured to any path, including those of existing files. This allows a user with...
CVE-2026-25825
An issue was discovered in Keyfactor SignServer before 7.6.0. The output file to which SignerStatusReportWorker logs the report can be set to any path, even one that points to a file that already exists. This gives a user with admin access the possibility to write files in arbitrary directories i...