Avid NEXIS Agent - Arbitrary File Read

Avid NEXIS E-series, F-series, PRO+, and System Director Appliance SDA+ before 2025.5.1 contain an unauthenticated arbitrary file read caused by improper validation of the filename parameter, letting unauthenticated attackers read sensitive files, exploit requires no authentication. id:...

Moderate: Red Hat Security Advisory: patch security update

An update for patch is now available for Red Hat Enterprise Linux 9.8 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for ea...

patch: Filename validation bypass in reversal fallback allows file creation outside the working directory

A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers a...

RHEL 9 : patch (RHSA-2026:99161)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:99161 advisory. The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to...

Rocky Linux 8 [CIQ] Security Update: patch / patch-debuginfo / patch-debugsource (crlsa-2026_96215)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202696215 advisory. patch: Filename validation bypass in reversal fallback allows file creation outside the working directory CVE-2026-115207 Tenable has extracted the preceding...

patch security update

An update is available for patch. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The patch program applies diff files to originals. The diff command is used to...

RLSA-2026:96215 Moderate: patch security update

The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to the file. A person who has the original file can then use the patch command with the diff file to add the changes to their original file patching th...

MiracleLinux 8 : patch-2.7.6-12.el8_10 (AXSA:2026-2300:01)

The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2026-2300:01 advisory. patch: Filename validation bypass in reversal fallback allows file creation outside the working directory CVE-2026-115207 Tenable has extracted the preceding...

RockyLinux 8 : patch (RLSA-2026:96215)

The remote RockyLinux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:96215 advisory. patch: Filename validation bypass in reversal fallback allows file creation outside the working directory CVE-2026-115207 Tenable has extracted the preceding...

AlmaLinux 8 : patch (ALSA-2026:96215)

The remote AlmaLinux 8 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2026:96215 advisory. patch: Filename validation bypass in reversal fallback allows file creation outside the working directory CVE-2026-115207 Tenable has extracted the preceding...

Moderate: Red Hat Security Advisory: patch security update

An update for patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

Oracle Linux 8 : patch (ELSA-2026-96215)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2026-96215 advisory. - CVE-2026-115207 patch: Filename validation bypass in reversal fallback allows file creation outside the working directory allows file creation outside the...

ALSA-2026:96215 Moderate: patch security update

The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to the file. A person who has the original file can then use the patch command with the diff file to add the changes to their original file patching th...

patch security update

2.7.6-12 - CVE-2026-115207 patch: Filename validation bypass in reversal fallback allows file creation outside the working directory allows file creation outside the working directory - Resolves: RHEL-289587...

RHEL 8 : patch (RHSA-2026:96215)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:96215 advisory. The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to...

Moderate: patch security update

The patch program applies diff files to originals. The diff command is used to compare an original to a changed file. Diff lists the changes made to the file. A person who has the original file can then use the patch command with the diff file to add the changes to their original file patching th...

CVE-2026-115207

A vulnerability exists in GNU patch where a flaw in the reversal fallback mechanism allows for arbitrary file creation outside the intended working directory. The root cause is a lack of validation that allows absolute file paths in patch headers to be accepted. An attacker can exploit this by en...

CVE-2026-115207 Patch: filename validation bypass in reversal fallback allows file creation outside the working directory

A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers a...

CVE-2026-115207 Patch: filename validation bypass in reversal fallback allows file creation outside the working directory

A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers a...

Red Hat: CVE-2026-115207: patch: Filename validation bypass in reversal fallback allows file creation outside the working directory

A flaw was found in GNU patch. An attacker can achieve arbitrary file creation outside the intended working directory by enticing a user or automated workflow to apply a specially crafted patch file. Due to missing validation during automatic patch reversal, absolute file paths in patch headers a...