CVE ID :CVE-2026-108980 Published : Oct. 12, 2026, 2:16 a.m. | 1 hour, 14 minutes ago Description :Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugin. It builds the plugin install path from an unsanitized name in server/routerTrpc/plugin.ts,...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-108980 - Blinko Directory Traversal Remote Code Execution

VERWANDTEARTIKEL

CVE-2026-78357 - Insufficient Session Revocation for JWT Authentication

CVE-2026-93582 - Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication

CVE-2026-78355 - Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory

Discourse Image Pipeline Exploit Chains JPEG Race, GhostScript and ImageMagick for File Read

CVE-2026-106126: Kritische Command Injection in Tenable Identity Exposure gefährdet Active Directory

Splunk Enterprise: Kritische RCE-Lücke in Search Head Clustern ohne Anmeldung ausnutzbar