<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: CWE-26</title><description>Every new CWE-26 Advisory and CVE.</description><link>https://agentprime.io/</link><item><title>CVE-2026-112904: Vvveb: Path Traversal in nextRestore() and nextBackup()</title><link>https://agentprime.io/advisories/CVE-2026-112904/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-112904/</guid><description>CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 23 Oct 2026 11:45:55 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-15896: Super Forms &lt;= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via &apos;sfgtfi&apos; URL Path Parameter</title><link>https://agentprime.io/advisories/CVE-2026-15896/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-15896/</guid><description>CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 02 Oct 2026 05:30:18 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2026-76317: Path Traversal through the Lookup Configuration REST API in Splunk Enterprise</title><link>https://agentprime.io/advisories/CVE-2026-76317/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-76317/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Aug 2026 21:34:24 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-46747: A vulnerability has been identified in SINEC INS (All versions &lt; V1.0 SP2 Update 6).</title><link>https://agentprime.io/advisories/CVE-2026-46747/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-46747/</guid><description>CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Jun 2026 08:46:54 GMT</pubDate><category>CVE</category></item><item><title>django-s3file is vulnerable to relative path traversal</title><link>https://agentprime.io/advisories/GHSA-67qg-7284-2277/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-67qg-7284-2277/</guid><description>django-s3file &lt;7.0.2, fixed in 7.0.2. CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Tue, 05 May 2026 20:05:49 GMT</pubDate><category>PyPI</category><category>django-s3file</category><category>critical</category></item><item><title>CVE-2026-25575: NavigaTUM has a Path Traversal Vulnerability in the propose_edits functionality</title><link>https://agentprime.io/advisories/CVE-2026-25575/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-25575/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 04 Feb 2026 21:54:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2022-45133: Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins.</title><link>https://agentprime.io/advisories/CVE-2022-45133/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2022-45133/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 22 Aug 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-53908: RomM vulnerable to Authenticated Path Traversal</title><link>https://agentprime.io/advisories/CVE-2025-53908/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-53908/</guid><description>CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 16 Jul 2025 19:55:15 GMT</pubDate><category>CVE</category></item><item><title>Label Studio has a Path Traversal Vulnerability via image Field</title><link>https://agentprime.io/advisories/GHSA-rgv9-w7jp-m23g/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-rgv9-w7jp-m23g/</guid><description>label-studio-sdk &lt;1.0.10, fixed in 1.0.10. CVSS 8.7 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Feb 2025 15:16:40 GMT</pubDate><category>PyPI</category><category>label-studio-sdk</category></item><item><title>CVE-2024-5866: Arbitrary Directory Listing in Centrify PAS</title><link>https://agentprime.io/advisories/CVE-2024-5866/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-5866/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Jul 2024 15:58:35 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-5865: Arbitrary File Reading in Centrify PAS</title><link>https://agentprime.io/advisories/CVE-2024-5865/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-5865/</guid><description>CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 02 Jul 2024 15:55:23 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-28064: Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete operations (with displayLoginChunkedImage…</title><link>https://agentprime.io/advisories/CVE-2024-28064/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-28064/</guid><description>CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 18 May 2024 22:02:03 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-29466: Directory Traversal vulnerability in lsgwr spring boot online exam v.0.9 allows an attacker to execute arbitrary code via the FileTransUtil.java component.</title><link>https://agentprime.io/advisories/CVE-2024-29466/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-29466/</guid><description>CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 30 Apr 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-31551: Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via crafted GET request.</title><link>https://agentprime.io/advisories/CVE-2024-31551/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-31551/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 26 Apr 2024 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-20345: Cisco AppDynamics: A vulnerability in the file upload functionality of Cisco AppDynamics Controller could…</title><link>https://agentprime.io/advisories/CVE-2024-20345/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-20345/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 06 Mar 2024 16:33:48 GMT</pubDate><category>CVE</category></item><item><title>React Native Document Picker Directory Traversal vulnerability</title><link>https://agentprime.io/advisories/GHSA-pmgm-h3cc-m4hj/</link><guid isPermaLink="true">https://agentprime.io/advisories/GHSA-pmgm-h3cc-m4hj/</guid><description>react-native-document-picker &lt;8.2.2 || &gt;=9.0.0, &lt;9.1.1, fixed in 8.2.2, 9.1.1. CVSS 7.3 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.</description><pubDate>Fri, 16 Feb 2024 09:30:26 GMT</pubDate><category>npm</category><category>react-native-document-picker</category></item><item><title>CVE-2023-50255: Zip Path Traversal in Deepin-Compressor</title><link>https://agentprime.io/advisories/CVE-2023-50255/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-50255/</guid><description>CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 Dec 2023 16:16:51 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2023-25802: Roxy-WI has Path Traversal vulnerability</title><link>https://agentprime.io/advisories/CVE-2023-25802/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-25802/</guid><description>CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 13 Mar 2023 19:35:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-42021: Siemens Siveillance Video DLNA Server: A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1)…</title><link>https://agentprime.io/advisories/CVE-2021-42021/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-42021/</guid><description>Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Nov 2021 11:32:15 GMT</pubDate><category>CVE</category></item><item><title>CVE-2021-34762: Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability</title><link>https://agentprime.io/advisories/CVE-2021-34762/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2021-34762/</guid><description>CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 27 Oct 2021 18:55:36 GMT</pubDate><category>CVE</category></item></channel></rss>