https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 12:35:22 +0000 https://db.gcve.eu/vuln/cve-2026-18640 <p><strong>Affected:</strong> Rapid7 Velociraptor</p> <p>The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOK_EDIT permission to write the notebook record outside the org&#39;s data store directory. The file written must have an extension of &#34;.json.db&#34; but can otherwise overwrite other metadata files (such as ACL records, hunts etc). This can corrupt these files and cause data corruption.</p> <p><strong>Affected:</strong> Rapid7 Velociraptor</p> <p>The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOK_EDIT permission to write the notebook record outside the org&#39;s data store directory. The file written must have an extension of &#34;.json.db&#34; but can otherwise overwrite other metadata files (such as ACL records, hunts etc). This can corrupt these files and cause data corruption.</p> https://db.gcve.eu/vuln/cve-2026-18640