https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-16T02:28:06.923064+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-41544 CVE-2026-41544 — Path Traversal leading to Arbitrary File Move, Docker Escape, and Host RCE in /calapi/renameUpload endpoint 2026-10-16T02:28:06.924339+00:00

Affected: QNAP Systems Inc. QcalAgent

A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.

We have already fixed the vulnerability in the following version: QcalAgent 1.1.10 and later