CVE-2026-79725

IBM Langflow OSS versions 1.0.0 through 1.11.5 are affected by an improper access control flaw (CWE-284 ) that allows a remote authenticated attacker to read arbitrary files. The vulnerability is part of a broader set of storage-path issues: the flow execution runtime accepts attacker-controlled ...

CVE-2026-80424

IBM DataStage on Cloud Pak for Data version 5.4.0.0 is affected by a path traversal vulnerability (CWE-22) that occurs during archive extraction , allowing a remote authenticated attacker to create arbitrary files. The flaw is rated CVSS 9.1 (Critical) with a scope change, reflecting high integri...

CVE-2026-81210

IBM DataStage on Cloud Pak for Data 5.4.0.0 is vulnerable to an IDOR combined with path traversal issue. Three caller-supplied strings are concatenated into a String.format path on the shared /ds-storage RWX PVC and the resulting file is returned with no project ACL check. Although reads are cons...

CVE-2025-30208-PoC

Disclaimer: The vulnerabilities and reproduction steps described in this article are intended solely for cybersecurity research and educational purposes. No one shall use the information provided in this article for illegal purposes or unauthorized system testing. The author assumes no...

CVE-2026-81540

IBM DataStage on Cloud Pak for Data 5.4.0.0 is affected by a path traversal vulnerability that allows a remote authenticated attacker to overwrite ruleset files belonging to other tenants . The CVSS 3.1 score is 8.5 (HIGH) with a changed scope, reflecting the cross-tenant integrity impact and low...

CVE-2024-53677

CVE-2024-53677 - Apache Struts 2 Root Cause Analysis Lab Environment This repository provides a Docker-based environment to reproduce the CVE-2024-53677 vulnerability in Apache Struts 2. This vulnerability involves path traversal through the file upload functionality in Struts 2. Source This lab...

CVE-2026-81551

IBM DataStage on Cloud Pak for Data 5.4.0.0 contains a path traversal vulnerability (CWE-22) that allows a remote authenticated attacker to arbitrarily write to or delete files on shared storage . The CVSS 3.1 score is 8.8 (High) , reflecting network attack vector, low complexity, and high impact...

CVE-2026-81554

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability (CWE-22). According to IBM's security bulletin, this CVE is part of a group of vulnerabilities introduced through open source pac...

CVE-2026-81554 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability...

CVE-2026-82092 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information due to an absolute-path traversal vulnerability...

CVE-2026-82092

IBM DataStage on Cloud Pak for Data 5.4.0.0 is affected by an absolute-path traversal vulnerability that allows a remote, authenticated attacker to obtain sensitive information. The IBM-assigned CVSS 3.1 score is 8.8 (High) with a vector of AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, reflecting high imp...

CVE-2026-82100

CVE-2026-82100 affects IBM DataStage on Cloud Pak for Data 5.4.0.0 , where a path traversal vulnerability (CWE-22) allows a remote authenticated attacker to cause a denial of service . The CVSS 3.1 score is 9.6 (Critical) , with a changed scope indicating cross-boundary impact on integrity and av...

CVE-2026-82100 DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...

CVE-2026-84889

IBM Langflow OSS versions 1.0.0 through 1.10.3 contain a path traversal vulnerability (CWE-22) in two independent file handling mechanisms. First, the file upload endpoint accepted multipart filenames from HTTP request metadata without sanitization, allowing directory traversal sequences in the C...

CVE-2021-42013

CVE-2021-42013 - Apache 2.4.50 Path Traversal & Remote Code Execution RCE ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author Walnut Security Services Pvt. Ltd Description An attacker could use a path traversal attack...

Grafana-CVE-2021-43798Exp

Grafana V8. Arbitrary File Read Exp -- Multi-threaded Batch Verification Script Vulnerability Description Grafana is an open-source metrics analysis and visualization suite. It is often used as a visualization tool for time series data and application analysis of infrastructure, and is also widel...

CVE-2024-4956

CVE-2024-4956 - Unauthenticated Path Traversal in Nexus Repository Manager 3 The Nexus Repository Manager is a repository manager that organizes, stores, and distributes artifacts needed for development. A path traversal vulnerability has been discovered in Nexus Repository 3, in versions prior t...

EUVD-2026-74277

n8n: Path Injection in Elasticsearch and ElasticSecurity Nodes via Unencoded Identifiers...

CVE-2024-1303---Badgermeter-moni-tool-Path-Traversal

CVE-2024-1303 --- Badgermeter moni tool - Path-Traversal https://www.incibe.es/en/incibe-cert/notices/aviso-sci/multiple-vulnerabilities-badger-meters-monitool CVE-2024-1303: 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N | CWE-22. Software link : https://www.s-can.at/en/product/monitool/...

CVE-2026-9225

IBM Langflow OSS 1.0.0 through 1.11.5 is affected by an authorization bypass (CWE-639) in the File/Read File component. When executing flows via the /api/v1/run/advanced/{flow_id} endpoint, component inputs can reference storage paths using arbitrary user or flow identifiers without verifying own...