Lucene search
+L

87 matches found

NVD
NVD
•added 2026/10/22 7:16 a.m.•3 views

CVE-2026-112826

Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through 2.12.0...

5.3CVSS0.00187EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/22 6:52 a.m.•6 views

CVE-2026-112826

The eLightUp Falcon – WordPress Optimizations & Tweaks plugin (versions up to and including 2.12.0 ) contains a Missing Authorization vulnerability (CWE-862). This flaw allows for the exploitation of incorrectly configured access control security levels , resulting in broken access control . Whil...

5.3CVSS6AI score0.00187EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/22 6:52 a.m.•18 views

CVE-2026-112826 WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.12.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through 2.12.0...

5.3CVSS0.00187EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/22 6:52 a.m.•5 views

EUVD-2026-108032

Missing Authorization vulnerability in eLightUp Falcon – WordPress Optimizations & Tweaks falcon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Falcon – WordPress Optimizations & Tweaks: from n/a through 2.12.0...

5.3CVSS6AI score0.00187EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2026/10/22 6:52 a.m.•4 views

WordPress Falcon – WordPress Optimizations & Tweaks plugin <= 2.12.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by HAIMIN in WordPress Plugin Falcon – WordPress Optimizations & Tweaks versions = 2.12.0...

5.3CVSS5.8AI score0.00187EPSS
SaveExploits0Affected Software1
Fedora
Fedora
•added 2026/10/03 12:31 a.m.•13 views

[SECURITY] Fedora 45 Update: labwc-tweaks-0.1.0-3.fc45

labwc-tweaks is a GUI configuration application for the labwc wayland compositor...

7.5CVSS5.9AI score0.00561EPSS
SaveExploits4
SUSE CVE
SUSE CVE
•added 2026/09/08 11:59 p.m.•19 views

SUSE CVE-2026-74859

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

6.8CVSS5.8AI score0.00173EPSS
SaveExploits0References3
NVD
NVD
•added 2026/09/08 9:18 a.m.•30 views

CVE-2026-74859

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

6.8CVSS0.00173EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/09/08 9:18 a.m.•14 views

DEBIAN-CVE-2026-74859

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

6.8CVSS5.8AI score0.00173EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/08 9:18 a.m.•21 views

CVE-2026-74859

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

6.8CVSS5.8AI score0.00173EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2026/09/08 9:18 a.m.•24 views

UBUNTU-CVE-2026-74859

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

6.8CVSS5.8AI score0.00173EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/09/08 9:01 a.m.•23 views

CVE-2026-74859

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

6.8CVSS5.8AI score0.00173EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/09/08 9:01 a.m.•14 views

CVE-2026-74859 Gnome-tweaks: path traversal in theme installer

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

6.8CVSS5.8AI score0.00173EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/08 9:01 a.m.•33 views

CVE-2026-74859

gnome-tweaks contains a path traversal vulnerability in its shell theme installer. The installer extracts user-supplied ZIP archives without validating archive member paths, allowing a crafted theme archive to write files outside ~/.themes via ../ sequences, absolute paths, or symlink entries. Th...

6.8CVSS5.8AI score0.00173EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/08 9:01 a.m.•19 views

EUVD-2026-72673

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

6.8CVSS5.8AI score0.00173EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/08 9:01 a.m.•42 views

CVE-2026-74859 Gnome-tweaks: path traversal in theme installer

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

6.8CVSS0.00173EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/08 12:00 a.m.•16 views

CVE-2026-74859: Improper Limitation of a Pathname to a Restricted Directory

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

6.8CVSS5.8AI score0.00173EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•31 views

PT-2026-87018

The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can write files outside /.themes by using ../ path traversal, absolute paths, or symlink entries...

6.8CVSS5.8AI score0.00173EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/08 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-74859

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The shell theme installer in gnome-tweaks extracts user-supplied ZIP archives without validating archive member paths. As a result, a crafted theme archive can...

6.8CVSS5.7AI score0.00173EPSS
SaveExploits0References4
NVD
NVD
•added 2026/07/27 3:17 p.m.•45 views

CVE-2026-59531

Unauthenticated Unknown in Falcon – WordPress Optimizations & Tweaks = 2.10.0 versions...

7.5CVSS0.0046EPSS
SaveExploits0References1
Rows per page
Query Builder