CVE-2026-15953

The ABB Protection and control IED manager (PCM600) is vulnerable to a Path Traversal vulnerability during the project archive import process. This issue specifically affects versions through 2.14 . The vulnerability allows for the improper limitation of a pathname to a restricted directory, pote...

CVE-2026-101066

A vulnerability was determined in dbgate up to 7.3.1. The impacted element is the function createLink of the file packages/api/src/controllers/archive.js of the component Archive Link Creation. This manipulation of the argument linkedFolder causes path traversal. The attack may be initiated...

CVE-2026-101066 dbgate Archive Link Creation archive.js createLink path traversal

A vulnerability was determined in dbgate up to 7.3.1. The impacted element is the function createLink of the file packages/api/src/controllers/archive.js of the component Archive Link Creation. This manipulation of the argument linkedFolder causes path traversal. The attack may be initiated...

CVE-2026-101066

The software dbgate (versions up to 7.3.1 ) is vulnerable to a path traversal vulnerability within the Archive Link Creation component. Specifically, the createLink function in the file packages/api/src/controllers/archive.js fails to properly handle the linkedFolder argument. This flaw allows an...

CVE-2026-101066 dbgate Archive Link Creation archive.js createLink path traversal

A vulnerability was determined in dbgate up to 7.3.1. The impacted element is the function createLink of the file packages/api/src/controllers/archive.js of the component Archive Link Creation. This manipulation of the argument linkedFolder causes path traversal. The attack may be initiated...

EUVD-2026-88235

A vulnerability was determined in dbgate up to 7.3.1. The impacted element is the function createLink of the file packages/api/src/controllers/archive.js of the component Archive Link Creation. This manipulation of the argument linkedFolder causes path traversal. The attack may be initiated...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in nanoid (CVE-2026-67213, CVE-2026-67214)

Summary Multiple vulnerabilities in the nanoid generator library CVE-2026-67213, CVE-2026-67214 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 3.3.17. Vulnerability Details CVEID:CVE-2026-67213 DESCRIPTION: nanoid Nano ID before 5.1.6 contain...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in Apache Thrift (CVE-2026-41608, CVE-2026-66053)

Summary Multiple Denial of Service vulnerabilities in Apache Thrift CVE-2026-41608, CVE-2026-66053 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 0.24.0. Vulnerability Details CVEID:CVE-2026-41608 DESCRIPTION: Improper Handling of Highly...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by multiple vulnerabilities in python-multipart (CVE-2026-53537, CVE-2026-53538, CVE-2026-53539, CVE-2026-53540)

Summary Multiple Denial of Service and resource exhaustion vulnerabilities in the python-multipart parser library CVE-2026-53537, CVE-2026-53538, CVE-2026-53539, CVE-2026-53540 used by IBM InfoSphere Optim Archive Viewer have been addressed by upgrading the component to version 0.0.32...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in idna (CVE-2026-45409)

Summary A Denial of Service vulnerability in the idna domain label parsing library CVE-2026-45409 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 3.18. Vulnerability Details CVEID:CVE-2026-45409 DESCRIPTION: Internationalized Domain Names in...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a vulnerability in axios (CVE-2026-42264)

Summary A credential exposure vulnerability during HTTP redirects in the axios HTTP client library CVE-2026-42264 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 1.18.0. Vulnerability Details CVEID:CVE-2026-42264 DESCRIPTION: Axios is a promise...

CVE-2026-87723

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

CVE-2026-87723 Untrusted Search Path (PATH Hijacking) in fuse-archive

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

CVE-2026-87723

Google fuse-archive versions prior to 1.24 are vulnerable to an Untrusted Search Path (PATH Hijacking) . An attacker capable of prepending a directory to the PATH or writing a malicious binary to a writable directory within the PATH can hijack the execution pathway. This vulnerability allows for ...

EUVD-2026-88074

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

CVE-2026-87723 Untrusted Search Path (PATH Hijacking) in fuse-archive

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

CVE-2026-87723 Untrusted Search Path (PATH Hijacking) in fuse-archive

In Google fuse-archive versions prior to 1.24, an attacker who can prepend a directory to PATH or write a malicious binary to an attacker-controlled or writable directory appearing in PATH can hijack the execution pathway. This allows the attacker to execute arbitrary local code under the securit...

PT-2026-99861

Name of the Vulnerable Software and Affected Versions dbgate versions prior to 7.3.2 Description A path traversal issue exists in the Archive Link Creation component. A remote attacker can manipulate the linkedFolder argument within the createLink function located in the...

PT-2026-102394

Name of the Vulnerable Software and Affected Versions Dozzle versions prior to 11.1.2 Description Insufficient sanitization of container display names occurs when building ZIP archive entry names in the log download endpoint. Attackers with the ability to label containers can employ path traversa...

CVE-2026-102332: Improper Limitation of a Pathname to a Restricted Directory

Dozzle versions before 11.1.2 fail to sanitize container display names when building ZIP archive entry names in the log download endpoint. Attackers who can label containers can use path traversal sequences to write files outside the extraction directory when users download and extract logs...