22611 matches found
PT-2026-80283
Impact What kind of vulnerability is it? Who is impacted? If the attacker compromises the backup's object storage backend and uploads a malicious backup tarball including file names like the following: ../../../tmp/escape 1 - file created at /tmp/escape 1 ../../../../../../../../tmp/escape 2 - fi...
Authorization Bypass Through User-Controlled Key
Overview org.springframework.data:spring-data-rest-core is a Spring Data REST. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the PATCH process. An attacker can overwrite identifier and version properties by sending crafted RFC 6902 JSON...
PT-2026-83652
Impact Affected versions of Winter CMS did not enforce the ImportExportController behavior's granular access control on the handlers that actually perform the work. The behavior supports per-operation access control through the importpermissions and exportpermissions configuration keys, enforced ...
PT-2026-79022
WeGIA before 3.9.2 contains an insecure direct object reference vulnerability in the employee profile page that allows authenticated attackers to access arbitrary employee records by injecting an id pessoa parameter through a request extraction function that overwrites the session-derived...
CVE-2026-71492: Improper Limitation of a Pathname to a Restricted Directory
Banks generates meaningful LLM prompts using a simple template language. Prior to version 2.4.5, DirectoryPromptRegistry.set in src/banks/registries/directory.py interpolates attacker-controlled Prompt.name and Prompt.version values into a Path without canonicalization or containment validation...
CVE-2026-16926: External Control of File Name or Path
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal in the getCacheName process. An attacker can overwrite arbitrary files on the filesystem by supplying a crafted URI fragment containing path traversal sequences when invoking the relevant resource-setting methods...
PT-2026-80745
Summary The MyAccountController::postAccountInfoForm action bound to POST /admin/edit-account-info calls $this-guard-user-update$request-except' token'. Because the controller uses except' token' rather than $request-validated or the restricted keys defined in AccountInfoRequest::validationData,...
CVE-2026-77113: Relative Path Traversal
Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the privileges of the executing user via an attacker controlled key names in crash report files...
CVE-2026-61625: Improper Limitation of a Pathname to a Restricted Directory
VictoriaMetrics is a scalable solution for monitoring and managing time series data. Prior to 1.122.25, 1.136.12, and 1.146.0, vmrestore does not validate backup part path components before using lib/backup/actions/restore.go and lib/backup/fslocal/fslocal.go to write restored data below...
CVE-2026-17171: Improper Link Resolution Before File Access
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to overwrite arbitrary files due to improper resolution of symbolic links...
Linux Distros Unpatched Vulnerability : CVE-2026-76219
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython versions before 3.1.58 contain an arbitrary file overwrite vulnerability in IndexFile.fromtree, IndexFile.reset, and IndexFile.mergetree methods that...
PT-2026-79053
Name of the Vulnerable Software and Affected Versions Banks versions prior to 2.4.5 Description The DirectoryPromptRegistry.set function in src/banks/registries/directory.py fails to perform canonicalization or containment validation when interpolating Prompt.name and Prompt.version values into a...
CVE-2026-76393
In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model being uploaded by another user by sending a concurrent upload request for the same model name, causing the resulting model lookup entry to reference attacker-controlled content. The race condition is...
CVE-2026-76354
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could affect system integrity and availability by sending a crafted Representational State Transfer REST API request that deletes or temporarily overwrites files...
CVE-2026-76393 Race Condition during Model Upload through the REST API in Splunk AI Toolkit
In Splunk AI Toolkit versions below 6.0.0, a user who can upload models could overwrite a model being uploaded by another user by sending a concurrent upload request for the same model name, causing the resulting model lookup entry to reference attacker-controlled content. The race condition is...
CVE-2026-76359
CVE-2026-76359 is a path traversal vulnerability in Splunk SOAR (On-premises) versions below 8.6.0 . The Universal Forwarder installer's credentials-package extraction workflow does not verify that each archive member remains within the intended destination directory before extraction. A user wit...
CVE-2026-76354 Path Traversal through Search Head Clustering in Splunk Enterprise
In Splunk Enterprise versions below 10.4.2, 10.2.6, 10.0.9, and 9.4.14, a user who does not hold the "admin" or "power" Splunk roles could affect system integrity and availability by sending a crafted Representational State Transfer REST API request that deletes or temporarily overwrites files...
Improper Authentication
Overview getgrav/grav is a Modern, Crazy Fast, Ridiculously Easy and Amazingly Powerful Flat-File CMS. Affected versions of this package are vulnerable to Improper Authentication in the login.regenerate2FASecret process. An attacker can gain unauthorized access by submitting a correct password fo...
