Threats Tagged 'cve-2026-72783'
View all threats tagged with 'cve-2026-72783'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-72783'
Click on any threat for detailed analysis and mitigation recommendations
0 Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 contain a theoretical path traversal weakness in the ensurePathIsContained function of the Local file system class. The order of operations validates the path before normalization, so normalization could invalidate prior validation assumptions (a desanitization-style issue) and potentially resolve to files outside the intended volume directory. The vendor notes the issue is not directly exploitable and no exploitable scenario has been discovered; the fix is recommended for hardening. Join the discussion | CVE Database V5 | 08/11/2026, 12:17:17 UTC Added: 08/11/2026, 12:42:11 UTC |
Craft CMS contains a theoretical path traversal vulnerability in the Local file system class's ensurePathIsContained function due to the order of path validation and normalization. Although no exploitable scenario has been identified, the issue could allow desanitization of file paths. A fix is available and recommended for hardening purposes. Join the discussion | GCVE Database | 08/06/2026, 21:36:11 UTC Added: 08/07/2026, 05:57:15 UTC |
Showing 1 to 2 of 2 results