Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo

Summary The Fortran extractor's C-preprocessor step graphify/extractors/fortran.py, cpppreprocess applies an incomplete include hardening. The -nostdinc -I /dev/null flags it relies on comment "Security F-007" do not stop a capital-F Fortran source file from including absolute paths include...

Important: Red Hat Security Advisory: python3 security update

An update for python3 is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

python: python: Arbitrary file deletion via race condition during temporary directory cleanup

A flaw was found in Python. A race condition during the cleanup of temporary directories allows a local attacker with write access to replace a directory with a symbolic link a reference pointing to another location. This can lead to unauthorized deletion or alteration of files outside the...

CVE-2026-107188 Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this...

EUVD-2026-104461

A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this...

CVE-2026-107188 Eptura Archibus Workflow Rule Enables Unauthenticated Arbitrary File Upload Leading to Remote Code Execution

A user can upload export reports with any file contents and specify any contents. JSP code can be uploaded, JSPX can be specified as the file extension, and anyone can browse to the uploaded file, leading to command execution. The authentication bypass vulnerability can be chained with this...

CVE-2026-107188

The Eptura Archibus software contains a vulnerability in the Workflow Rule component that allows for unauthenticated arbitrary file upload . An attacker can upload export reports containing malicious JSP code and specify a JSPX file extension. Because the uploaded file is accessible via a web bro...

CVE-2026-112310

docling-core 2.5.0 before 2.103.0 contains a local file disclosure vulnerability that allows attackers to read local images by supplying plain filesystem paths in ImageRef URIs, bypassing the allowimagefileuri gate. Attackers can submit crafted DoclingDocument JSON or YAML that, when exported wit...

CVE-2026-111045

CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target. The fallback resolves only the parent directory and returns the symlink path ...

ArmorX Global ArmorX Spam Code Injection Vulnerability

The ArmorX Global ArmorX versions prior to 8.15.2-3.282.133-1.90.061 have a code injection vulnerability. This vulnerability stems from path traversal, causing the application to contain PHP files that are outside of the expected directories. This may lead to local file inclusion...

TYPO3 Fluid-Form: Encryption issue vulnerability due to coding.ms

TYPO3 Fluid-Form: Versions from 6.0.0 to 6.0.6 and before, as well as 5.0.10, have security vulnerabilities. These vulnerabilities stem from the use of a predictable token in the download link for uploading files via forms. Additionally, the filename in the request does not undergo anti-guessing...

Eosphoros DB-GPT Trust Management Vulnerabilities

eosphoros DB-GPT versions 0.8.2 and earlier have a trust management vulnerability. This vulnerability stems from hard-coded credentials in the default docker-compose.yml file. A static MYSQLROOTPASSWORD is set, and port 3306 is exposed on all interfaces. An attacker can authenticate as root@% and...

Arizu Fast Tunnel permission permissions and access control issues

Arizu Fast Tunnel 1.0.0 version has a security vulnerability. This vulnerability stems from the improper handling of the pluginfile parameter in the ZipArchive::extractTo function within the Plugin Installer component. It may lead to unlimited file uploads...

Apple macOS numerical error vulnerability

Apple macOS versions prior to Golden Gate 27, Apple macOS Sequoia 15.8, and Apple macOS Tahoe 26.7 have security vulnerabilities. These vulnerabilities stem from integer underflow, which may lead to unexpected system termination when attackers control network file servers...

Apostrophe Technologies ApostropheCMS Path Traversal Vulnerability

Apostrophe Technologies ApostropheCMS has a path traversal vulnerability. This vulnerability arises when the paths controlled by attackers reach the local backend, including segments of the parent directory. This allows for the escape of the configured upload directory, leading to path traversal...

Optimal IdM OptimalCloud: Input validation error vulnerability

The Optimal IdM OptimalCloud 5.0 version has a vulnerability related to input validation errors. This vulnerability stems from improper handling of the state parameter in the file/v5.0/social, which may lead to open redirection. Attackers can trigger this remotely...

Finsys Dockhand authorization issue vulnerability

Finsys Dockhand versions prior to 1.0.46 have an authorization vulnerability. This vulnerability arises because non-administrator users with the stacks:edit permission can use the /api/system/files/content path parameter to provide absolute paths for file reading, potentially leading to the...

tox-dev filelock: Processing logic error vulnerability

The tox-dev filelock version 4.1.0 to 4.2.1 contained a processing logic vulnerability. This vulnerability stemmed from the SoftFileLock component reusing outdated observation results when at least two lock user processes were waiting. An attacker could set and delete their own markers, and use...

Apostrophe Technologies ApostropheCMS Resource Management Vulnerability

Apostrophe Technologies' ApostropheCMS has a resource management vulnerability. This vulnerability arises because authenticated importers can submit archived files whose number of decompressed bytes, number of entries, and size are not restricted before document type authorization. Failure in...

Oracle Autonomous Health Framework security vulnerabilities

A security vulnerability exists in Oracle Autonomous Health Framework versions 26.3 through 26.8. This vulnerability stems from issues within the Trace File Analyzer component and may allow low-privilege attackers to log in and execute infrastructure tasks. They could gain unauthorized access to...