PT-2026-60182

Name of the Vulnerable Software and Affected Versions Cloudreve versions prior to 4.16.1 Description Cloudreve is a self-hosted file management and sharing system. A flaw exists where a WebDAV account rooted at a configured folder can access files outside that directory by sending paths such as...

PT-2026-60150

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-26 ImageMagick versions 6.9.13-x prior to 6.9.13-51 Description A policy bypass exists in the -script operation due to missing security policy checks. This flaw allows the reading of files from paths that ar...

PT-2026-60218

Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine versions prior to 3.3 Cisco Identity Services Engine versions 3.3 through 3.3 before Patch 12 Cisco Identity Services Engine versions 3.4 through 3.4 before Patch 7 Cisco Identity Services Engine versions 3.5...

PT-2026-60377

Name of the Vulnerable Software and Affected Versions TensorZero versions prior to 2026.6.0 Description The /internal/object storage endpoint accepts a caller-supplied JSON storage path parameter that dynamically overrides the object storage configuration. By abusing the filesystem storage type, ...

Microsoft Office Excel heap buffer overflow vulnerability (CNVD-2026-29405)

Microsoft Office Excel is a spreadsheet processing software in the Microsoft Office suite. It primarily provides functions such as data calculation, chart analysis, and table management. There is a heap buffer overflow vulnerability in Microsoft Office Excel. This vulnerability occurs due to the...

Cisco Identity Services Engine (cisco-sa-ise-traversal-xNt7wb2Y)

According to its self-reported version, Cisco ISE is affected by a vulnerability. - A vulnerability in Cisco Identity Services Engine ISE and Cisco ISE Passive Identity Connector ISE-PIC could allow an authenticated, remote attacker to perform path traversal attacks on the underlying operating...

PT-2026-60291

DataEase is an open source data visualization and analysis tool. Prior to 2.10.23, DataEase template static resources let authenticated users submit TemplateManageRequest.staticResource through POST /de2api/templateManage/save or DataVisualizationServer.decompression, after which...

CVE-2026-46458: Insufficiently Protected Credentials

ICU Scandinavia Boomerang is vulnerable to an information disclosure flaw where sensitive credential files are exposed via static HTTP. This allows an unauthenticated remote attacker to retrieve plaintext service account and SMTP credentials by requesting specific XML files from the webroot. This...

CVE-2026-61446: Improper Control of Generation of Code

PraisonAI praisonaiagents before 1.6.78 contains a remote code execution vulnerability in the plugin manager, which loads and executes arbitrary Python .py files from project-level and user-home .praisonai/plugins/ directories using importlib specfromfilelocation and execmodule without code...

CVE-2026-61866: Missing Release of Memory after Effective Lifetime

ImageMagick before 7.1.2-26 contains a memory leak vulnerability in the JNG encoder when a blob cannot be opened. Attackers can trigger the memory leak by providing malformed JNG files that fail blob operations, causing resource exhaustion...

CVE-2026-58659: Use of Externally-Controlled Input to Select Classes or Code

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the loadstate function that imports and executes attacker-controlled module names from checkpoint instantiator hyperparameters. Attackers can craft malicious checkpoint files that bypass...

PT-2026-60214

Name of the Vulnerable Software and Affected Versions File Browser versions 2.63.6 through 2.63.16 Description The archive builder improperly handles filenames by using strings.ReplaceAllnameInArchive, "", "/". This allows a user with upload permissions to create a file with backslashes in the...

PT-2026-60263

Name of the Vulnerable Software and Affected Versions Apache Ivy versions 2.0.0 through 2.5.3 Description The PackagerResolver in Apache Ivy allows the downloading and repackaging of online artifacts based on a packager.xml file. This process uses an Ant script stored in a subdirectory of the...

Microsoft PowerShell Help Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft PowerShell. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

CVE-2026-62947: Improper Limitation of a Pathname to a Restricted Directory

OpenWrt is a Linux operating system targeting embedded devices. Prior to 25.12.5, the cgi-download handler in cgi-io authorizes the requested path against the caller's ubus session file ACL before canonicalization, and rpcd session.c uses fnmatch without FNMPATHNAME, allowing traversal such as an...

PT-2026-60156

Name of the Vulnerable Software and Affected Versions ImageMagick versions prior to 7.1.2-26 Description A memory leak exists in the JNG encoder when a blob cannot be opened. An attacker can trigger this issue by providing malformed JNG files that cause blob operations to fail, leading to resourc...

Cloud Files Mini Filter Driver Privilege Escalation

The vulnerability of the Cloud Files Mini Filter Driver for Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

libcurl Unauthorized Access

The vulnerability of the libcurl library in software applications for interacting with servers via cURL is related to the use of files and directories accessible from external parties. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected...

CVE-2026-48318

CVE-2026-48318 affects ColdFusion with an improper limitation of a pathname to a restricted directory (path traversal) that could enable arbitrary file system reads. The vulnerability allows an attacker to access sensitive files outside the intended scope without user interaction; the CVSS 3.1 ve...

EUVD-2026-44551

ColdFusion is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...