CVE ID :CVE-2026-111915 Published : 19 października 2026 13:55 | 9 minut ago Description :Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help. Attackers can supply...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-111915 - Yank Note before 3.93.1 Path Traversal via /api/help Endpoint

VERWANDTEARTIKEL

CVE-2026-112265 - LangBot through 4.11.0 Missing Lark/Feishu Webhook Authenticity Verification

CVE-2026-112266 - SGLang through 0.5.22 Cross-Request Abort via rid Prefix Matching

CVE-2026-112264 - BentoML through 1.4.39 Dockerfile Instruction Injection via docker.env Keys

CVE-2026-112263 - Television 0.15.0 through 0.15.9 OS Command Injection via External Action Formatting

Hackers Exploit SiteGuard WAF Vulnerability That Could Give Them Full Control of Servers

CVE-2026-88901 - Apache Camel: Camel-Smooks XML External Entity Processing, external entities resolved by default