https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-09T23:59:35.243752+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-123621 fkie_cve-2026-123621 2026-11-09T23:59:35.245401+00:00

Usermin through 2.570 contains a path traversal vulnerability in mailbox/detachall.cgi that allows remote unauthenticated attackers to write files outside the temporary directory via unsanitized attachment filenames. Attackers can email attachments with ../ sequences in filenames, and when the recipient downloads all attachments, files like ~/.forward are overwritten, enabling command execution.

 https://db.gcve.eu/vuln/ghsa-6rhc-3jj8-rcqx GHSA-6rhc-3jj8-rcqx 2026-11-09T23:59:35.245476+00:00

Usermin through 2.570 contains a path traversal vulnerability in mailbox/detachall.cgi that allows remote unauthenticated attackers to write files outside the temporary directory via unsanitized attachment filenames. Attackers can email attachments with ../ sequences in filenames, and when the recipient downloads all attachments, files like ~/.forward are overwritten, enabling command execution.