Lucene search
+L

5 matches found

RedhatCVE
RedhatCVE
•added 2026/06/05 7:18 p.m.•36 views

CVE-2026-9102

A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to missing filename sanitization in the Gerber file upload APIs. A regular authenticated workspace user can supply a crafted filename in the multipart Content-Disposition header to escape the intended...

9.4CVSS6.5AI score0.00799EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/05/20 5:48 p.m.•49 views

CVE-2026-9102 Path Traversal in Altium Enterprise Server ComparisonService Allows Arbitrary File Write

A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to missing filename sanitization in the Gerber file upload APIs. A regular authenticated workspace user can supply a crafted filename in the multipart Content-Disposition header to escape the intended...

9.4CVSS0.00799EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/20 5:48 p.m.•38 views

CVE-2026-9102

The CVE-2026-9102 issue affects the Altium Enterprise Server ComparisonService. A path traversal flaw arises from missing filename sanitization in Gerber file upload APIs. A regular authenticated workspace user can craft a filename in the multipart Content-Disposition header to escape the intende...

9.4CVSS6.4AI score0.00799EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/05/20 5:48 p.m.•11 views

CVE-2026-9102

A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to missing filename sanitization in the Gerber file upload APIs. A regular authenticated workspace user can supply a crafted filename in the multipart Content-Disposition header to escape the intended...

9.4CVSS6.4AI score0.00799EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/20 12:00 a.m.•32 views

PT-2026-42229

A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to missing filename sanitization in the Gerber file upload APIs. A regular authenticated workspace user can supply a crafted filename in the multipart Content-Disposition header to escape the intended...

9.4CVSS6.5AI score0.00799EPSS
SaveExploits0References2
Rows per page
Query Builder