https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 11 Nov 2026 01:16:47 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-125357 <p>Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal vulnerability in the static file handler of Munin::Master::HTML::handle_request that allows unauthenticated attackers to read files outside the static directory. Attackers can request /static/../&lt;file&gt; to bypass the &#39;/../&#39; substring check and read munin.conf and plugin-conf.d files containing monitored service credentials.</p> <p>Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal vulnerability in the static file handler of Munin::Master::HTML::handle_request that allows unauthenticated attackers to read files outside the static directory. Attackers can request /static/../&lt;file&gt; to bypass the &#39;/../&#39; substring check and read munin.conf and plugin-conf.d files containing monitored service credentials.</p> https://db.gcve.eu/vuln/fkie_cve-2026-125357 https://db.gcve.eu/vuln/ghsa-p249-34gr-hj2h <p>Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal vulnerability in the static file handler of Munin::Master::HTML::handle_request that allows unauthenticated attackers to read files outside the static directory. Attackers can request /static/../&lt;file&gt; to bypass the &#39;/../&#39; substring check and read munin.conf and plugin-conf.d files containing monitored service credentials.</p> <p>Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal vulnerability in the static file handler of Munin::Master::HTML::handle_request that allows unauthenticated attackers to read files outside the static directory. Attackers can request /static/../&lt;file&gt; to bypass the &#39;/../&#39; substring check and read munin.conf and plugin-conf.d files containing monitored service credentials.</p> https://db.gcve.eu/vuln/ghsa-p249-34gr-hj2h