Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 07:33:45 +0000 CVE-2026-85688 — TEN Framework 0.11.71 Unauthenticated File Read/Write via TMAN Designer https://db.gcve.eu/vuln/cve-2026-85688 <p><strong>Affected:</strong> ten-framework</p> <p>TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-content API endpoints. Attackers can submit POST and PUT requests to the /api/designer/v1/file-content endpoints to read arbitrary files or write malicious content to system paths, enabling code execution through authorized_keys, cron files, or executable graph files.</p> <p><strong>Affected:</strong> ten-framework</p> <p>TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-content API endpoints. Attackers can submit POST and PUT requests to the /api/designer/v1/file-content endpoints to read arbitrary files or write malicious content to system paths, enabling code execution through authorized_keys, cron files, or executable graph files.</p> https://db.gcve.eu/vuln/cve-2026-85688