Threats Tagged 'cve-2026-68922'
View all threats tagged with 'cve-2026-68922'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-68922'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-68922 is a path traversal vulnerability in MobSF Mobile-Security-Framework-MobSF prior to version 4.5.1. The flaw exists in the find_icon_path_zip function, which uses the Android manifest's android:icon value to build file paths without proper validation. This allows an authenticated user to upload a crafted ZIP or APK file that can read server files with allowed extensions, copy them to a predictable location, and retrieve them via the /download/ endpoint. The vulnerability also enables a file-existence oracle through the icon_path report field. The issue is fixed in version 4.5.1. Join the discussion | CVE Database V5 | 08/18/2026, 17:47:56 UTC Added: 08/18/2026, 17:50:23 UTC |
Showing 1 to 1 of 1 result