CVE-2026-50697: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally...

PT-2026-58401

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description An out-of-bounds read in the Windows NTFS file system allows an authorized local attacker to elevate their privileges. An out-of-bounds read occurs when a program reads data past the end...

CVE-2026-50469: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-56648: Time-of-check Time-of-use (TOCTOU) Race Condition

Time-of-check time-of-use toctou race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network...

CVE-2026-50458: Use After Free

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

CVE-2026-48338: Improper Limitation of a Pathname to a Restricted Directory

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

CVE-2026-56194: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges over a network...

CVE-2026-50492: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Resilient File System ReFS allows an unauthorized attacker to execute code with a physical attack...

CVE-2026-56650: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows Network File System allows an authorized attacker to elevate privileges locally...

PT-2026-58304

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally...

PT-2026-58438

Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to execute code locally...

PT-2026-58330

Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally...

CVE-2026-47996: Incorrect Authorization

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could lead to arbitrary file system read. A high-privileged attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue does not requir...

PT-2026-58617

Time-of-check time-of-use toctou race condition in Windows Network File System allows an authorized attacker to elevate privileges over a network...

EUVD-2026-43509

Rejetto HFS 3.0.0 through 3.2.0 returns observably different responses from its login endpoint depending on whether the submitted username exists. A remote unauthenticated attacker can use this to confirm valid account names, including the default admin account, facilitating password-guessing and...

CVE-2026-61503 Rejetto HFS < 3.2.1 Username Enumeration via Login Response Differences

Rejetto HFS 3.0.0 through 3.2.0 returns observably different responses from its login endpoint depending on whether the submitted username exists. A remote unauthenticated attacker can use this to confirm valid account names, including the default admin account, facilitating password-guessing and...

PYSEC-2026-2655 MLFlow Creates a Temporary File With Insecure Permissions

In mlflow/mlflow versions prior to 3.11.0, the getorcreatenfstmpdir function in mlflow/utils/fileutils.py creates temporary directories with world-writable permissions 0o777, and the createmodeldownloadingtmpdir function in mlflow/pyfunc/init.py creates directories with group-writable permissions...

MLFlow Creates a Temporary File With Insecure Permissions

In mlflow/mlflow versions prior to 3.11.0, the getorcreatenfstmpdir function in mlflow/utils/fileutils.py creates temporary directories with world-writable permissions 0o777, and the createmodeldownloadingtmpdir function in mlflow/pyfunc/init.py creates directories with group-writable permissions...

pygeoapi 0.23.x: Path Traversal in STAC FileSystemProvider

ImpactA raw string path concatenation vulnerability in pygeoapi's STAC FileSystemProvider plugin can allow for requests to STAC collection based collections to expose directories without authentication. The issue manifests when pygeoapi is deployed without a proxy or web front end that would...

PYSEC-2026-2985 pygeoapi 0.23.x: Path Traversal in STAC FileSystemProvider

Impact A raw string path concatenation vulnerability in pygeoapi's STAC FileSystemProvider plugin can allow for requests to STAC collection based collections to expose directories without authentication. The issue manifests when pygeoapi is deployed without a proxy or web front end that would...