2 matches found
CVE-2026-32973
OpenClaw prior to 2026.3.11 is affected by an exec allowlist bypass vulnerability in the matchesExecAllowlistPattern logic. The issue arises from improper normalization (lowercasing) and glob matching that overmatches on POSIX paths, allowing the ? wildcard to cross path segments and execute comm...
9.8CVSS6AI score0.00406EPSS
SaveExploits0References2Affected Software1
Delinea Secret Server 安全漏洞
Delinea Secret Server is a powerful PAM in the cloud or locally from Delinea USA. A security vulnerability exists in Delinea Secret Server version v11.7.31, which stems from a comparison of URIs before normalization and canonicalization in a protocol handler function, which may result in an...
8.3CVSS6.7AI score0.0073EPSS
SaveExploits1References3
20