CVE-2026-104418 Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Files

Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary...

CVE-2026-104418 Ghost from 6.10.3 before 6.64.0 RCE via Theme Translation Files

Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary...

CVE-2026-104417 Ghost 1.20.0 before 6.64.0 Path Traversal via Locale Setting

Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposin...

CVE-2026-104417

The Ghost platform (versions 1.20.0 before 6.64.0 ) is vulnerable to a path traversal flaw in the theme translation file loading mechanism. This issue allows authenticated administrators to manipulate the locale setting to load JSON files from locations outside the active theme directory. Success...

EUVD-2026-91428

Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposin...

CVE-2026-104417 Ghost 1.20.0 before 6.64.0 Path Traversal via Locale Setting

Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposin...

CVE-2026-104417 Ghost 1.20.0 before 6.64.0 Path Traversal via Locale Setting

Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposin...

CVE-2026-104418: Improper Limitation of a Pathname to a Restricted Directory

Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translation file loading. Attackers with administrator access can upload a crafted theme containing malicious translation files to execute arbitrary...

PT-2026-104228

Name of the Vulnerable Software and Affected Versions Ghost versions 1.20.0 through 6.63.x Description A path traversal issue exists in the theme translation file loading process. This allows authenticated administrators to read JSON files located outside the active theme directory by manipulatin...

PT-2026-104229

Name of the Vulnerable Software and Affected Versions Ghost versions 6.10.3 through 6.63.x Description Authenticated administrators can achieve remote code execution by abusing the theme translation file loading process. This occurs when an attacker with administrator privileges uploads a special...

CVE-2026-104417: Improper Limitation of a Pathname to a Restricted Directory

Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON files outside the active theme directory. Attackers can manipulate the locale setting to load JSON files elsewhere on the server, exposin...

CVE-2026-103495

In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...

CVE-2026-103495

Versions of JetBrains YouTrack prior to 2026.2.19422 are vulnerable to a missing authorisation flaw. This security weakness allows for the unauthorized reloading of translation catalogs . The CVSS 3.1 score is 4.3 (Medium) , with a network attack vector and low complexity. Exploitation details an...

EUVD-2026-90586

In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...

CVE-2026-103495

In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...

CVE-2026-103495

In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...

CVE-2026-103495: Missing Authorization

In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...

KaliBench: A Fine-Grained Benchmark for Cybersecurity Tool Use on Kali Linux with Runtime-Free Verifiable Rewards

LLMs are increasingly applied to cybersecurity workflows, where they are expected to translate analysts' intent into tool invocations. However, existing evaluations focus on knowledge-based assessments or end-to-end agentic tasks, and do not directly measure LLMs' ability to generate executable...

PT-2026-103755

In JetBrains YouTrack before 2026.2.19422 missing authorisation allowed reloading of translation catalogs...

@aarnet/jupyterlab-ext-aarnet-help (>=3.0.0, <=3.0.2), @aarnet/jupyterlab-ext-changeconf (3.0.0) +623 more potentially affected by CVE-2026-102830 via @jupyterlab/translation (>=3.1.18, <=4.4.10)

@jupyterlab/translation NPM version =3.1.18, =3.0.0, =0.2.0-a0, =1.0.0, =0.6.2-alpha.0, =0.6.2-alpha.0, =0.6.2-alpha.0, =0.1.4, =0.1.4, =0.1.4, =0.1.4, =0.1.4, =0.1.4, =0.1.4, =0.1.5 and more Source cves: CVE-2026-102830 Source advisory: SNYK:JS-JUPYTERLABTRANSLATION-20335546...