Threats Tagged 'cve-2026-72572'
View all threats tagged with 'cve-2026-72572'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-72572'
Click on any threat for detailed analysis and mitigation recommendations
A path traversal vulnerability in o1lab/xmysql (all versions) allows an unauthenticated remote attacker to read and download arbitrary files from… (CVE-2026-72572)CVE-2026-72572 0 A path traversal vulnerability exists in all versions of o1lab/xmysql. It allows an unauthenticated remote attacker to read and download arbitrary files from the server by exploiting improper sanitization of user input in the file download functionality. The vulnerability arises from the use of a user-controlled parameter in a path join operation without validation, enabling directory traversal via '../' sequences. Join the discussion | GCVE Database | 08/10/2026, 12:31:52 UTC Added: 08/10/2026, 15:39:57 UTC |
CVE-2026-72572: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in o1lab xmysqlCVE-2026-72572 0 A path traversal vulnerability in o1lab/xmysql (all versions) allows an unauthenticated remote attacker to read and download arbitrary files from the server. The lib/xapi.js file at lines 338 and 424 uses the user-controlled req.query.name parameter in path.join(cwd, name) without sanitization before passing it to res.download, enabling directory traversal via ../ sequences to access sensitive system files. Join the discussion | CVE Database V5 | 08/10/2026, 10:40:52 UTC Added: 08/10/2026, 10:56:46 UTC |
Showing 1 to 2 of 2 results