CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.5.0, ci4ms Th...

CVE-2026-41203

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati

历史摘要 · 未重新核验 · NVD

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. Prior to version 0.31.5.0, ci4ms Ba...

CVE-2026-41202

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorizati

历史摘要 · 未重新核验 · NVD

Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request...

CVE-2026-40982

Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server

历史摘要 · 未重新核验 · NVD

FileBrowser Public Share DELETE API Path Traversal Allows Unauthenticated Arbitrary File Deletion

CVE-2026-44542

### **Summary** Attacker-controlled path input is joined with a trusted base path prior to sanitization, allowing trave

历史摘要 · 未重新核验 · GitHub Advisory

Goteberg has arbitrary PDF read via stampExpression and watermarkExpression in merge, split, and convert routes

CVE-2026-42593

## Summary Six conversion routes (`pdfengines/merge`, `pdfengines/split`, `libreoffice/convert`, `chromium/convert/url`

历史摘要 · 未重新核验 · GitHub Advisory

Angular SSR has Open Redirect and Request Steering via Encoded X-Forwarded-Prefix

CVE-2026-44437

### Description A vulnerability exists in the `X-Forwarded-Prefix` header processing logic within Angular SSR. The inter

历史摘要 · 未重新核验 · GitHub Advisory

OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earlier and versions 2.8.0 through 2.8.5, the module upload endpoint at POST `/op...

CVE-2026-40076

OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earlier and versions 2.8

历史摘要 · 未重新核验 · NVD

NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment handling and outbox cleanup that allows a compromised or prom...

CVE-2026-7875

NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outbound attachment hand

历史摘要 · 未重新核验 · NVD

OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earlier and versions 2.8.0 through 2.8.5, the `/openmrs/moduleResources/{moduleid...

CVE-2026-40075

OpenMRS Core 是一个开源电子病历系统平台。在 2.7.8 及更早版本、2.8.0 至 2.8.5 版本中，`/openmrs/moduleResources/{moduleid}` 端点存在路径遍历漏洞。漏洞位于 ModuleR

历史摘要 · 未重新核验 · NVD

Grav has Unauthenticated Path Traversal & Arbitrary File Write in its FormFlash component

CVE-2026-42608

# Vulnerability Report: Grav CMS Unauthenticated Path Traversal & Arbitrary File Write **[ZERO-DAY] Unauthenticated Pat

历史摘要 · 未重新核验 · GitHub Advisory

PyLoad vulnerable to Path Traversal via Package Folder Name in set_package_data

CVE-2026-42315

### Summary No sanitization of package folder name allows writing files anywhere outside the intended download directory

历史摘要 · 未重新核验 · GitHub Advisory

PyLoad Vulnerable to Path Traversal via Package Folder Name

CVE-2026-42314

Insufficient sanitization of package folder names allows writing files outside the intended download directory. ## Affe

历史摘要 · 未重新核验 · GitHub Advisory

Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an authenticated user to escape...

CVE-2026-35397

Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerabili

历史摘要 · 未重新核验 · NVD

wireshark-mcp vulnerable to arbitrary file write via export_objects when WIRESHARK_MCP_ALLOWED_DIRS is not configured

CVE-2026-43901

## Description ### Impact `wireshark-mcp` exposes a `wireshark_export_objects` MCP tool that accepts an attacker-contr

历史摘要 · 未重新核验 · GitHub Advisory

MinIO vulnerable to Path Traversal via msgpack Body in `ReadMultiple` Storage-REST Endpoint

CVE-2026-42600

### Impact _What kind of vulnerability is it? Who is impacted?_ A path traversal vulnerability in MinIO's `ReadMultipl

历史摘要 · 未重新核验 · GitHub Advisory

gix and gitoxide: unvalidated submodule name traverses out of .git/modules and redirects state() / open() to another repository

## **Summary** attachments: [pocs.zip](https://github.com/user-attachments/files/26431422/pocs.zip) Submodule names com

历史摘要 · 未重新核验 · GitHub Advisory

gix and gitoxide's symlinked .gitmodules are followed and parsed from outside of the repository

## Summary attachments: [pocs.zip](https://github.com/user-attachments/files/26431422/pocs.zip) When `Repository::subm

历史摘要 · 未重新核验 · GitHub Advisory

In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTTP API allows an unauthenticated remote attacker to perfor...

CVE-2026-7411

In Eclipse BaSyx Java Server SDK versions prior to 2.0.0-milestone-10, inadequate path normalization in the Submodel HTT

历史摘要 · 未重新核验 · NVD

The Betheme theme for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 28.4. This is due to the upload_icons() function workflow using a user...

CVE-2026-6262

The Betheme theme for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and including, 28.4. This is

历史摘要 · 未重新核验 · NVD

Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request...

CVE-2026-43870

Origin Validation Error, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutra

历史摘要 · 未重新核验 · NVD