Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 18:07:11 +0000 CVE-2026-110116 — Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile https://db.gcve.eu/vuln/cve-2026-110116 <p><strong>Affected:</strong> risesoft-y9 Digital-Infrastructure</p> <p>Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to write arbitrary files. Attackers can send crafted fullPath and fileName parameters to POST /rest/storeFile to create or overwrite service-writable files, potentially achieving code execution.</p> <p><strong>Affected:</strong> risesoft-y9 Digital-Infrastructure</p> <p>Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to write arbitrary files. Attackers can send crafted fullPath and fileName parameters to POST /rest/storeFile to create or overwrite service-writable files, potentially achieving code execution.</p> https://db.gcve.eu/vuln/cve-2026-110116