CVE ID :CVE-2026-55852 Published : July 10, 2026, 10:16 p.m. | 16 minutes ago Description :Frappe is a full-stack web application framework. Prior to 16.23.0 and 15.112.0, TarSlip RCE was possible in Package Import because tarfile members were not sufficiently checked before extraction. This...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-55852 - Frappe: TarSlip RCE in Package Import

VERWANDTEARTIKEL

CVE-2026-55882 - Tilt: Unauthenticated pprof debug endpoints on the Tilt HUD server

CVE-2026-55883 - Tilt: Cross-site WebSocket hijacking of the Tilt HUD stream

CVE-2026-55884 - Tilt: Missing authentication on the network-exposed Tilt HUD server

CVE-2026-57584 - Phalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoS

CVE-2026-49213 - TypeBot: SSRF protection bypass via IPv6 unspecified address in Typebot HTTP request execution

CVE-2026-52747 - ModSecurity: Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypass