Threats Tagged 'cve-2026-55419'
View all threats tagged with 'cve-2026-55419'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-55419'
Click on any threat for detailed analysis and mitigation recommendations
0 Reachy Mini SDK versions prior to 1.8.2 have an unauthenticated file upload vulnerability at the /api/media/sounds/upload endpoint. This endpoint lacks authentication, file extension checks, content validation, and size validation, allowing an attacker to upload arbitrary files. The daemon binds to all interfaces (0.0.0.0) and permits all CORS origins, increasing exposure. Uploaded files are stored in /tmp/reachy_mini_sounds/ with their original filenames. This can lead to integrity compromise of stored data and potentially serve as a foothold if combined with other vulnerabilities. The issue is fixed in version 1.8.2. Join the discussion | CVE Database V5 | 08/25/2026, 17:34:58 UTC Added: 08/25/2026, 17:37:41 UTC |
Showing 1 to 1 of 1 result