POC-CVE-2026-19679

CVE-2026-19679 —— 上传文件名清理不足（输入验证） 状态：已确认 ，在 6.7.2-14.el9 实验室环境（2026-08-20）中验证。POST /rest/auditFile 携带 tailoringOriginalFilename = "poc;touch$IFSpoc19679;me.xml" 返回 HTTP 200，并 注册了 AuditFile 1000002 —— 该包含 shell 元字符的文件名通过了验证并被 端到端存储。在 6.9.0 上，同一请求被拒绝，返回 "Invalid tailoring filename."。 漏洞...

portaudit -- auditfile remote code execution

Michael Gmelin and Jörg Scheinert has reported a remote command execution vulnerability in portaudit. An attacker who can get the user to use a specially crafted audit file will be able to run commands on the users system, with the privileges of the user running running portaudit often root. The...