CVE ID :CVE-2026-78355 Published : Oct. 12, 2026, 7:16 a.m. | 15 minutes ago Description :A path traversal vulnerability in the OTRS SendSupportBundle functionality allows an authenticated administrator to reference file paths outside the intended directory. This may allow files accessible...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-78355 - Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory

VERWANDTEARTIKEL

CVE-2026-78357 - Insufficient Session Revocation for JWT Authentication

CVE-2026-93582 - Authentication Bypass via Spoofed Remote-User Header in HTTP Basic Authentication

Discourse Image Pipeline Exploit Chains JPEG Race, GhostScript and ImageMagick for File Read

CVE-2026-106126: Kritische Command Injection in Tenable Identity Exposure gefährdet Active Directory

Splunk Enterprise: Kritische RCE-Lücke in Search Head Clustern ohne Anmeldung ausnutzbar

Astron Agent: Kritische Mandantenflucht und Codeausführung in Versionen vor 1.1.2