EUVD-2026-113120

Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update request to their server can prepare arbitrary XML file that will be saved in location chosen by attacker. This issue was fixed in version 2.0 build 708...

CVE-2026-12074

"FramenetCorpusReader.framename" interpolates a caller-supplied frame name into an XML file path that is read with the builtin "open", bypassing "CorpusReader.open" and the "nltk.pathsec" sandbox — including strict "ENFORCE=True" mode. A "../" sequence in the name escapes the corpus root, yieldin...

Skype Extras Manager (skypePM.exe) skype-plugin: URI Arbitrary XML File Deletion (credentialed check)

According to its timestamp, the version of Skype installed on the remote host likely includes a version of the Skype Extras Manager skypePM.exe that has a flaw in its handling of the 'skype-plugin:' protocol. If an attacker can trick a user on the affected system into clicking on a specially...