CVE-2026-34783 is a path traversal vulnerability in MontFerret's ferret product prior to version 2.0.0-alpha.4. The flaw exists in the IO::FS::WRITE standard library function, allowing a malicious website to cause Ferret to write arbitrary files to the host filesystem by using crafted filenames containing '.. /' sequences. This can enable attackers to control both the destination path and file content, potentially leading to remote code execution through mechanisms like cron jobs, SSH authorized_keys, shell profiles, or web shells. The vulnerability is fixed in version 2.0.0-alpha.
baserCMS is a website development framework. Prior to version 5.2.3, a path traversal vulnerability exists in the theme file management API (/baser/api/admin/bc-theme-file/theme_files/add.json) that allows arbitrary file write. An authenticated administrator can include ../ sequences in the path parameter to create a PHP file in an arbitrary directory outside the theme directory, which may result in remote code execution (RCE). This issue has been patched in version 5.2.3.
Nginx UI is a web user interface for the Nginx web server. Prior to version 2.3.4, the nginx-ui configuration improperly handles URL-encoded traversal sequences. When specially crafted paths are supplied, the backend resolves them to the base Nginx configuration directory and executes the operation on the base directory (/etc/nginx). In particular, this allows an authenticated user to remove the entire /etc/nginx directory, resulting in a partial Denial of Service. This issue has been patched in version 2.3.4.
Mobile Next is an MCP server for mobile development and automation. Prior to version 0.0.49, the `@mobilenext/mobile-mcp` server contains a Path Traversal vulnerability in the `mobile_save_screenshot` and `mobile_start_screen_recording` tools. The `saveTo` and `output` parameters were passed directly to filesystem operations without validation, allowing an attacker to write files outside the intended workspace. Version 0.0.49 fixes the issue.
CVE-2026-33645 is a path traversal vulnerability in ShaneIsrael fireshare version 1.5.1. It allows an authenticated attacker to write arbitrary files outside the intended upload directory via the chunked upload endpoint by exploiting improper sanitization of the 'checkSum' multipart field. This can lead to integrity violations and potentially enable further attacks depending on the deployment environment. The issue is fixed in version 1.5.2.
A flaw was found in libssh where it can attempt to open arbitrary files during configuration parsing. A local attacker can exploit this by providing a malicious configuration file or when the system is misconfigured. This vulnerability could lead to a Denial of Service (DoS) by causing the system to try and access dangerous files, such as block devices or large system files, which can disrupt normal operations.
CVE-2026-33329 is a high-severity path traversal vulnerability in FileRise, a self-hosted web file manager and WebDAV server. Versions from 1.0.1 up to but not including 3.10.0 are affected. The issue arises because the resumableIdentifier parameter in the chunked upload handler is concatenated directly into filesystem paths without sanitization. An authenticated user with upload permissions can exploit this flaw to write files to arbitrary directories, delete directories during cleanup, and probe for file or directory existence. No user interaction beyond authentication is required, and the vulnerability allows significant integrity and availability impact. The vulnerability has been patched in version 3.
CVE-2026-33309 is a critical path traversal vulnerability in langflow versions 1.2.0 through 1.8.1. It arises from an architectural flaw in the LocalStorageService where boundary checks are missing, allowing an authenticated attacker to bypass filename validation on the POST /api/v2/files/ endpoint. This enables arbitrary file write anywhere on the host system, potentially leading to remote code execution without user interaction. The vulnerability stems from a failed patch for a previous related issue (CVE-2025-68478) and is fixed in version 1.9.0.
WWBN AVideo is an open source video platform. In versions up to and including 26.0, `POST /objects/aVideoEncoder.json.php` accepts a requester-controlled `chunkFile` parameter intended for staged upload chunks. Instead of restricting that path to trusted server-generated chunk locations, the endpoint accepts arbitrary local filesystem paths that pass `isValidURLOrPath()`. That helper allows files under broad server directories including `/var/www/`, the application root, cache, tmp, and `videos`, only rejecting `.php` files. For an authenticated uploader editing their own video, this becomes an arbitrary local file read. The endpoint copies the attacker-chosen local file into the attacker's public video storage path, after which it can be downloaded over HTTP. Commit 59bbd601a3f65a5b18c1d9e4eb11471c0a59214f contains a patch for the issue.
The Task Manager plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 3.0.2 via the callback_get_text_from_url() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
SiYuan is a personal knowledge management system. Prior to version 3.6.2, the Siyuan kernel exposes an unauthenticated file-serving endpoint under `/appearance/*filepath.` Due to improper path sanitization, attackers can perform directory traversal and read arbitrary files accessible to the server process. Authentication checks explicitly exclude this endpoint, allowing exploitation without valid credentials. Version 3.6.2 fixes this issue.
CVE-2026-32949 is a high-severity Server-Side Request Forgery (SSRF) vulnerability in dataease SQLBot versions prior to 1.7.0. It allows unauthenticated attackers to exploit the /api/v1/datasource/check endpoint by configuring a malicious MySQL data source with the parameter extraJdbc="local_infile=1". During the backend's connectivity check, a rogue MySQL server can trigger a LOAD DATA LOCAL INFILE command, forcing the target server to read arbitrary local files and send their contents back to the attacker. This can lead to disclosure of sensitive system and application files such as /etc/passwd. The vulnerability requires no authentication or user interaction and affects the confidentiality of the server. It was fixed in version 1.7.0.
CVE-2026-32749 is a high-severity vulnerability in SiYuan personal knowledge management system versions 3.6.0 and below. It involves improper sanitization of file paths in two API endpoints that handle uploaded archives, allowing an admin user to write files to arbitrary locations outside the intended temporary directory. This flaw can lead to remote code execution (RCE) by overwriting critical system or application files. In Docker containers running as root, exploitation results in full container compromise. The vulnerability does not require user interaction but does require admin privileges. It has been fixed in version 3.6.1.
External Control of File Name or Path in the Mail feature of Zoom Workplace for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via network access.
MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to version 0.17.0, the `confluence_download_attachment` MCP tool accepts a `download_path` parameter that is written to without any directory boundary enforcement. An attacker who can call this tool and supply or access a Confluence attachment with malicious content can write arbitrary content to any path the server process has write access to. Because the attacker controls both the write destination and the written content (via an uploaded Confluence attachment), this constitutes for arbitrary code execution (for example, writing a valid cron entry to `/etc/cron.d/` achieves code execution within one scheduler cycle with no server restart required). Version 0.17.0 fixes the issue.
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application performs file deletion without properly validating the file path or target. An attacker could delete files or sockets that the affected process has permission to remove, potentially resulting in denial of service or service disruption.
A vulnerability has been identified in SICAM SIAPP SDK (All versions < V2.1.7). The affected application builds shell commands with caller-provided strings and executes them. An attacker could influence the executed command, potentially resulting in command injection and full system compromise.
ZimaOS is a fork of CasaOS, an operating system for Zima devices and x86-64 systems with UEFI. In version 1.5.2-beta3, users are restricted from deleting internal system files or folders through the application interface. However, when interacting directly with the API, these restrictions can be bypassed. By altering the path parameter in the delete request, internal OS files and directories can be removed successfully. The backend processes these manipulated requests without validating whether the targeted path belongs to restricted system locations. This demonstrates improper input validation and broken access control on sensitive filesystem operations. No known public patch is available.