PT-2026-35622

Summary SubFileSystem fails to confine operations to its declared sub path when the input path is /../ or equivalents /../, /... This path passes all validation but resolves to the root of the parent filesystem, allowing directory level operations outside the intended boundary. Affected Component...

Deep Scan: Expanding Vulnerability Detection Beyond Traditional Boundaries

Security teams estimate that a significant percentage of enterprise software is installed outside standard system directories or package-managed locations, creating persistent visibility gaps for traditional vulnerability-scanning methods. As environments become more decentralized, with...

Path traversal

A path traversal vulnerability exists within GoAnywhere MFT before 6.8.3 that utilize self-registration for the GoAnywhere Web Client. This vulnerability could potentially allow an external user who self-registers with a specific username and/or profile information to gain access to files at a...