Path Traversal Archives • Daily CyberSecurity

Critical RCE Flaws Fixed in Mautic Marketing Platform Mautic security vulnerabilities critical RCE flaws

Critical RCE Flaws Fixed in Mautic Marketing Platform

Do Son June 4, 2026

Overview of the Security Threat Mautic has released urgent security updates to address dangerous software flaws in...

Apache Ignite Vulnerability Fixes Critical Security Loophole Apache Ignite vulnerability arbitrary file read

Apache Ignite Vulnerability Fixes Critical Security Loophole

Do Son May 30, 2026

Recently, the Apache Software Foundation announced an important patch for its popular database management platform. This fix...

New Jenkins Security Advisory Highlights Severe Plugin Flaws Jenkins RCE vulnerabilities Jenkins plugin security flaws CVE-2024-47855

New Jenkins Security Advisory Highlights Severe Plugin Flaws

Do Son May 29, 2026

The Jenkins project recently released an urgent patch update addressing multiple security issues in its popular automation...

Critical Defect Discovered in Langflow AI Architecture IBM WebSphere execution flaws WebSphere security bulletin patches request smuggling patch WebSphere remote code execution Langflow OSS vulnerability remote code execution patch

IBM WebSphere execution flaws WebSphere security bulletin patches request smuggling patch WebSphere remote code execution Langflow OSS vulnerability remote code execution patch

Critical Defect Discovered in Langflow AI Architecture

Do Son May 28, 2026

IBM has issued an urgent security warning regarding a critical security loophole in an open-source artificial intelligence...

Triple CVSS 10.0 Warning: Critical Ubiquiti UniFi OS Flaws Allow Unauthenticated Remote Takeovers Ubiquiti UniFi OS Vulnerabilities UniFi OS Firmware Update 2026 UniFi Play Vulnerability Critical RCE Patch Ubiquiti UniFi Vulnerability CVE-2026-22557

Ubiquiti UniFi OS Vulnerabilities UniFi OS Firmware Update 2026 UniFi Play Vulnerability Critical RCE Patch Ubiquiti UniFi Vulnerability CVE-2026-22557

Triple CVSS 10.0 Warning: Critical Ubiquiti UniFi OS Flaws Allow Unauthenticated Remote Takeovers

Do Son May 22, 2026

Ubiquiti has issued a major security advisory addressing five distinct vulnerabilities across its UniFi OS ecosystem. Three...

Altium Enterprise Server Vulnerability CVE-2026-9129 Path Traversal Patreon OAuth Vulnerability Identity Collision DRC INSIGHT Vulnerability Exam Data Hijacking Horner Automation PLC Industrial Brute Force Honeywell IQ4x Vulnerability CVE-2026-3611 DJI Romo vacuum security flaw Python Cryptography Vulnerability CVE-2026-26007 Open5GS Vulnerability CVE-2026-0622 Vivotek IP7137 Vulnerabilities CVE-2025-66049 Forcepoint DLP Vulnerability CVE-2025-14026 Cellopoint Secure Email Gateway - CVE-2024-9043

Critical Altium Enterprise Server Flaws Grant RCE and Database Access

Do Son May 22, 2026

Altium Enterprise Server, the backbone platform used by engineering teams globally to manage complex printed circuit board...

Unpatched SGLang Vulnerabilities (CVE-2026-7301) Expose AI Inference Pipelines to RCE SGLang RCE Vulnerability CVE-2026-7301 Zero-Day SGLang RCE AI Infrastructure Vulnerability

SGLang RCE Vulnerability CVE-2026-7301 Zero-Day SGLang RCE AI Infrastructure Vulnerability

Unpatched SGLang Vulnerabilities (CVE-2026-7301) Expose AI Inference Pipelines to RCE

Do Son May 21, 2026

The rapid adoption of large language models (LLMs) and multimodal artificial intelligence has created a brand-new frontier...

Gamaredon Exploits WinRAR Path Traversal to Unleash GammaDrop Malware The Gentlemen Ransomware Leak Rocket Database RaaS

Gamaredon Exploits WinRAR Path Traversal to Unleash GammaDrop Malware

Do Son May 18, 2026

A new investigation has unmasked a relentless spearphishing campaign by the Russian-aligned threat actor Gamaredon, exposing their...

Critical 9.6 Severity Ivanti Xtraction Flaw Exposes Sensitive Data Ivanti ITSM vulnerability authenticated privilege escalation Ivanti Xtraction vulnerability CVE-2026-8043 Ivanti EPM RCE, SQL Injection Ivanti EPM, remote code execution CVE-2024-50330 - CVE-2025-0282 and CVE-2025-0283

Ivanti ITSM vulnerability authenticated privilege escalation Ivanti Xtraction vulnerability CVE-2026-8043 Ivanti EPM RCE, SQL Injection Ivanti EPM, remote code execution CVE-2024-50330 - CVE-2025-0282 and CVE-2025-0283

Critical 9.6 Severity Ivanti Xtraction Flaw Exposes Sensitive Data

Do Son May 14, 2026

Ivanti has issued an urgent security update for its Xtraction platform to address a critical vulnerability. Carrying...

Critical Casdoor Vulnerability CVE-2026-44213 Allows Arbitrary File Overwrites Casdoor Arbitrary File Write CVE-2026-44213 Path Traversal

Critical Casdoor Vulnerability CVE-2026-44213 Allows Arbitrary File Overwrites

Do Son May 13, 2026

In the complex world of Identity and Access Management (IAM), the security of the gateway is paramount....

Critical Siemens ROS# Flaw Enables Arbitrary File Access and Host Takeover ROS# Path Traversal CVE-2026-41551 Siemens SIMATIC Auth Bypass, CVE-2025-40771 CVE-2024-22039 & CVE-2024-49775 CVE-2024-56336

ROS# Path Traversal CVE-2026-41551 Siemens SIMATIC Auth Bypass, CVE-2025-40771 CVE-2024-22039 & CVE-2024-49775 CVE-2024-56336

Critical Siemens ROS# Flaw Enables Arbitrary File Access and Host Takeover

Do Son May 12, 2026

In a significant security disclosure on May 12, 2026, Siemens ProductCERT issued an advisory regarding a critical...

Triple Critical Threat: Apache Wicket Patch Fixes Path Traversal, Session Hijacking, and Resource Bypass CVE-2024-36522 Apache Wicket Critical Vulnerabilities CVE-2026-43975

CVE-2024-36522 Apache Wicket Critical Vulnerabilities CVE-2026-43975

Triple Critical Threat: Apache Wicket Patch Fixes Path Traversal, Session Hijacking, and Resource Bypass

Do Son May 7, 2026

The Apache Wicket project, a popular open-source Java framework prized for its clean separation of HTML markup...

Rancher Flaw Allows Malicious Plugins to Hijack Kubernetes Clusters Rancher security flaws cluster privilege escalation Rancher Path Traversal CVE-2026-25705 Rancher Vulnerabilities, SAML Phishing CVE-2024-22036 Rancher, vulnerability

Rancher security flaws cluster privilege escalation Rancher Path Traversal CVE-2026-25705 Rancher Vulnerabilities, SAML Phishing CVE-2024-22036 Rancher, vulnerability

Rancher Flaw Allows Malicious Plugins to Hijack Kubernetes Clusters

Do Son May 5, 2026

The SUSE Rancher Security team has issued an urgent advisory regarding a high-severity vulnerability in Rancher, the...

Critical Wazuh Vulnerability Enables Lateral Movement and Root Access Wazuh Cluster RCE CVE-2026-30893

Critical Wazuh Vulnerability Enables Lateral Movement and Root Access

Do Son April 30, 2026

Wazuh, the widely deployed open-source platform for threat detection and response, has addressed a critical path traversal...

Langflow Alert: Path Traversal Flaw in Knowledge Bases API Risks Total Data Wipeout Langflow Vulnerability CVE-2026-42048 Langflow RCE CVE-2026-27966 Langflow Vulnerabilities CVE-2026-33017

Langflow Vulnerability CVE-2026-42048 Langflow RCE CVE-2026-27966 Langflow Vulnerabilities CVE-2026-33017

Langflow Alert: Path Traversal Flaw in Knowledge Bases API Risks Total Data Wipeout

Do Son April 28, 2026

Langflow, the popular visual framework for building and deploying AI-powered agents , has patched a critical security...

Critical 9.8 CVSS Flaw Exposes Intrado 911 Emergency Gateways Intrado 911 Gateway Vulnerability CVE-2026-6074

Critical 9.8 CVSS Flaw Exposes Intrado 911 Emergency Gateways

Do Son April 27, 2026

A critical security flaw has been discovered in the Intrado 911 Emergency Gateway (EGW). The vulnerability, designated...

CVE-2026-40342: CVSS 10.0 Path Traversal to RCE in Firebird Database Firebird Database RCE CVE-2026-40342

CVE-2026-40342: CVSS 10.0 Path Traversal to RCE in Firebird Database

Do Son April 22, 2026

Researchers have disclosed a critical-severity vulnerability in Firebird, the long-standing relational database with roots dating back to...

CrowdStrike Issues Critical Alert: LogScale Vulnerability Allows Unauthenticated File Access LogScale Vulnerability Path Traversal Falcon Sensor File Deletion, CVE-2025-42701 CrowdStrike update crashes - CVE 2025-1146

CrowdStrike Issues Critical Alert: LogScale Vulnerability Allows Unauthenticated File Access

Do Son April 22, 2026

TranslationCrowdStrike has released an urgent security update to address a critical flaw in its LogScale platform that...

Froxlor’s CVSS 10 Flaw Turns Config Files into Persistent Backdoors Froxlor RCE Persistent Backdoor

Froxlor’s CVSS 10 Flaw Turns Config Files into Persistent Backdoors

Do Son April 17, 2026

Security researchers have sounded the alarm on two critical vulnerabilities within Froxlor, the popular open-source server management...

Adobe Rushes Patches for Critical ColdFusion RCE and Security Bypasses ColdFusion RCE Adobe Security Patch

Adobe Rushes Patches for Critical ColdFusion RCE and Security Bypasses

Do Son April 15, 2026

Adobe has released an urgent set of security updates to address multiple vulnerabilities within its ColdFusion 2025...