CVE-2026-6590

A vulnerability was detected in ComfyUI up to 0.13.0. This impacts the function getmodelpreview of the file app/modelmanager.py of the component Model Preview Endpoint. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The...

PT-2022-26198 · Unknown · Mantenimiento Web Plugin

Name of the Vulnerable Software and Affected Versions: Mantenimiento web plugin versions = 0.13 Description: The issue is related to an authenticated Cross-Site Scripting XSS vulnerability. This means that an attacker who has admin or higher privileges can inject malicious scripts into the websit...