pappl-retrofit directory traversal in PPD actions (CVE-2026-123747)
The flaw affects add-ppdfiles and delete-ppdfiles, with a fix planned for a release soon after the advisory.
Stories per day · 30 days
2 RSS
Relatedrce8quest-foglight5zdi4genesis-world3zero-day3information-disclosure2arbitrary-file-write1cve-2026-1022571databases1environment-variable1foglight1gettext1glibc1linux1mailemail1openprinting1open-source1pappl-retrofit1
18 stories, newest first · one card per story
Stories tagged #directory-traversal
MailEnable arbitrary file creation vulnerability
ZDI-26-869 CVSS 7.4 lets remote attackers create arbitrary files on MailEnable without authentication.
Quest Foglight for Databases installLicense directory traversal enables remote code execution
InstallLicense directory traversal flaw allows remote arbitrary code execution; authentication required.
glibc gettext allows directory traversal via LANGUAGE
The issue affects GNU C Library 2.0 and later, except setuid or setgid programs marked AT_SECURE.
ZDI-26-770: SonicWall Secure Mobile Access unzip Directory Traversal Remote Code Execution Vulnerability
ZDI discloses authenticated remote code execution in SonicWall Secure Mobile Access via unzip traversal, CVE-2026-102257.
ZDI-26-752: (0Day) Genesis World decompress_usdz Directory Traversal Remote Code Execution Vulnerability
ZDI disclosed an unpatched Genesis World decompress_usdz traversal RCE rated CVSS 7.8.
Hackers exploit critical Atlassian flaw after public PoC release
Attackers began exploiting critical Atlassian flaw CVE-2026-21589 within hours of a public proof of concept.
3
CISA Warns of Check Point Vulnerabilities Exploited in Attacks (CVE-2026-85102 & CVE-2026-93616)
CISA says two critical Check Point VPN and management flaws are exploited in the wild.
2
Hackers Exploit Check Point 0-Day Flaw to Execute Code on Management Servers
Check Point says CVE-2026-93616 is exploited to run code on unauthenticated management servers.
3
ZDI-26-734: Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability
Foxit PDF Reader RichMedia directory traversal can allow remote code execution after user interaction.
Check Point Management Server 0-Day Vulnerability Actively Exploited in Attacks
Check Point says attackers exploited critical Management Server zero-day CVE-2026-93616 for unauthenticated code execution.
3
ZDI-26-705: (0Day) BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability
ZDI disclosed an unpatched symlink directory traversal flaw (CVE-2026-92205, CVSS 6.1) in BusyBox libarchive enabling arbitrary file creation.
[webapps] C-MOR 6.0104 - Directory Traversal
A directory traversal proof-of-concept for video surveillance software C-MOR version 6.0104 has been published on Exploit-DB.
Exploits in the Wild for Citrix ADC and Citrix Gateway Directory Traversal Vulnerability CVE-2019
Unit 42 confirmed in-the-wild exploitation of CVE-2019-19781, a critical Citrix ADC/Gateway directory traversal flaw enabling unauthenticated file access and RCE.
ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure Vulnerability
Cisco Identity Services Engine's PatchUpdateListener has an authenticated directory traversal (CVE-2026-20148, CVSS 4.9) enabling sensitive information disclosure.
ZDI-26-579: Cisco Identity Services Engine zipFiles Directory Traversal Remote Code Execution Vulnerability
ZDI disclosed an authenticated directory traversal flaw (CVE-2026-20181) in Cisco Identity Services Engine allowing remote code execution, CVSS 7.2.
[webapps] Ray 2.56.0 - Directory Traversal & Local File Inclusion
Public exploit released for directory traversal and local file inclusion in Ray 2.56.0, the widely used distributed ML framework.
VU#614868: OpenCart ecommerce platform contains directory traversal vulnerability
OpenCart 4.2.0.0 extension installer fails to validate zip extraction paths, allowing directory traversal (CVE-2026-18412) to write files outside intended directories.