CVE-2026-18792: Synology DiskStation Manager (DSM): An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation…

An improper limitation of a pathname to a restricted directory vulnerability in the Sharing API in Synology DiskStation Manager DSM before 7.3.2-86009-5 and 7.4.1-90080-1 allows remote authenticated users to read or write arbitrary files and conduct denial-of-service attacks...

Fortinet FortiManager Improper limitation of a pathname to a restricted directory in apache_mod (FG-IR-26-250)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-250 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Fortinet FortiAnalyzer Improper limitation of a pathname to a restricted directory (FG-IR-26-237)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-237 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

Fortinet FortiAnalyzer Improper limitation of a pathname to a restricted directory (FG-IR-26-236)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-26-236 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported...

Fortinet FortiManager Improper limitation of a pathname to a restricted directory (FG-IR-26-236)

The version of FortiManager installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the FG-IR-26-236 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported...

PT-2026-144865

Name of the Vulnerable Software and Affected Versions FortiMail versions 8.0.0 through 8.0.1 FortiMail versions 7.6.0 through 7.6.6 FortiMail versions 7.4.0 through 7.4.8 FortiMail version 7.2 all versions Description An improper limitation of a pathname to a restricted directory, known as path...

PT-2026-144890

Name of the Vulnerable Software and Affected Versions FortiAnalyzer version 8.0.0 FortiAnalyzer versions 7.6.0 through 7.6.7 FortiAnalyzer versions 7.4.0 through 7.4.11 FortiAnalyzer Cloud version 8.0.0 FortiAnalyzer Cloud versions 7.6.0 through 7.6.7 FortiAnalyzer Cloud versions 7.4.1 through...

PT-2026-144893

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 8.0.0 through 8.0.1 FortiAnalyzer versions 7.6.3 through 7.6.7 FortiAnalyzer Cloud versions 8.0.0 through 8.0.1 FortiAnalyzer Cloud versions 7.6.3 through 7.6.7 FortiManager versions 8.0.0 through 8.0.1 FortiManager...

PT-2026-144898

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 8.0.0 through 8.0.1 FortiAnalyzer versions 7.6.2 through 7.6.7 FortiAnalyzer versions 7.4.7 through 7.4.11 FortiAnalyzer versions 7.2.10 through 7.2.12 FortiAnalyzer Cloud versions 8.0.0 through 8.0.1 FortiAnalyzer Cloud...

EUVD-2026-114862

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Path Traversal.This issue affects JetFormBuilder: from n/a through 3.6.7.1...

EUVD-2026-112214

An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or delete arbitrary certificate and key files on the host filesystem via the...

CVE-2026-105457

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: before 2.3.5-1132...

EUVD-2026-111851

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: before 2.3.5-1132...

CVE-2026-105457

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: before 2.3.5-1132...

PT-2026-128048

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: before 2.3.5-1132...

PT-2026-128283

An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or delete arbitrary certificate and key files on the host filesystem via the...

CVE-2026-116690: Improper Limitation of a Pathname to a Restricted Directory

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.10.0 until 3.17.0, the prompt branch in createmodelversion accepts schemeless relative sources because path validation runs only when a source has a URL scheme, and...

CVE-2026-105947

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.120 before 6.4.122...

EUVD-2026-109783

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.120 before 6.4.122...

PT-2026-123284

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.120 before 6.4.122...