PT-2026-106752

Name of the Vulnerable Software and Affected Versions Microsoft.OpenApi.Kiota versions 1.25.1 through 1.34.1 Microsoft.OpenApi.Kiota.Builder versions 1.25.1 through 1.34.1 Description Kiota, an OpenAPI based HTTP Client code generator, fails to validate the x-ai-capabilities.response...

PT-2026-107199

Name of the Vulnerable Software and Affected Versions ClearPass Policy Manager affected versions not specified Description An authenticated path traversal vulnerability exists in the command line interface. This flaw allows a low-privileged authenticated remote attacker to execute arbitrary code...

CVE-2026-95106: Use of Incorrectly-Resolved Name or Reference

Gitea accepted pushed Git trees containing two entries with the same name, which Git's own consistency checks reject. Gitea's web views resolved such a path to the first entry, while git checkout, Gitea Actions, and release archives use the last. A contributor could open a pull request whose diff...

CVE-2026-105840: Improper Limitation of a Pathname to a Restricted Directory

lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files outside the current directory using absolute pathnames. Because checkpath in src/lrz.c only rejects '../' sequences unless built with...

PT-2026-106725

Name of the Vulnerable Software and Affected Versions lrzsz versions prior to 0.13.0 Description The lrz receive utility contains a path traversal issue in its restricted mode. This occurs because the checkpath function in src/lrz.c only filters out ../ sequences when not built with the...

PT-2026-107135

On affected versions of CloudVision Portal on-premises or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient high privileges could exploit this to extract unintended data from the Sensor...

PT-2026-106607

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A routing loop can be configured by a user with CAP NET ADMIN privileges. When ipip fill forward path or ip6 tnl fill forward path look up the route to a tunnel's remote endpoint and the...

PT-2026-106684

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description A null pointer dereference occurs in the RDMA/rtrs client. When the init path function returns an error, the system attempts cleanup via the rtrs clt close conns function. This process can...

PT-2026-106584

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.10-1.1 Description An issue exists in the TCP implementation where old ACKs Acknowledgment numbers before SND.UNA and ACKs after SND.NXT are not properly excluded from the TCP fast path. This allows such ACKs...

PT-2026-107267

Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-bitbucket-cloud versions prior to 0.3.10 @backstage/plugin-scaffolder-backend-module-bitbucket-server versions prior to 0.2.25 Description Bitbucket pull-request Scaffolder actions fail to sufficient...

CVE-2026-105834: Improper Limitation of a Pathname to a Restricted Directory

Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the...

PT-2026-115795

In the Linux kernel, the following vulnerability has been resolved: tcp: exclude old ACKs from tcp fast path Exclude old ACKs before SND.UNA from the tcp fast path as well as ACKs after SND.NXT. Such ACKs will fall through to the slow path, where tcp ack performs the appropriate validation and...

PT-2026-107203

🚨 CVE-2026-79805 CVSS 9.8 Critical A path traversal flaw in HPE ClearPass Policy Manager allows remote attackers to read and overwrite sensitive OS files, leading to system compromise. https://t.co/AuVFW8JRTI https://t.co/jsTxIa6pL3...

OpenSSH -- Multiple vulnerabilities

The OpenSSH project reports: sftp1: more strictly validate paths returned from the server to avoid some cases where a server could return paths that could manipulate a recursive copy operation into writing outside its target directory. sshd8: when GSSAPIAuthentication is in use, only store GSSAPI...

Fortinet FortiMail Path Traversal / NULL Byte Arbitrary File Write (FG-IR-26-175)

The version of FortiMail installed on the remote host is affected by a path traversal vulnerability as referenced in the FG-IR-26-175 advisory. - An improper limitation of a pathname to a restricted directory 'Path Traversal' combined with an improper neutralization of NULL byte or NULL character...

CVE-2026-79805: Improper Limitation of a Pathname to a Restricted Directory

An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system...

CVE-2026-101154: Improper Limitation of a Pathname to a Restricted Directory

An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially crafted requests and/or crafted file uploads to the Network Provisioning Image Repository...

CVE-2026-39754: Improper Limitation of a Pathname to a Restricted Directory

Contributor Arbitrary File Download in Piotnet Addons For Elementor = 7.1.71 versions...

CVE-2026-39752: Improper Limitation of a Pathname to a Restricted Directory

Contributor Arbitrary File Deletion in Jobs for WordPress = 2.8.2 versions...

PT-2026-106716

Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting resources.source.N.config.file to any absolute path. Attackers can retrieve file contents through editProjectNodeSourceFile or the...