CVE ID :CVE-2026-113613 Published : Oct. 20, 2026, 3:40 p.m. | 25 minutes ago Description :FlexGet before 3.20.7 contains a path traversal vulnerability in the decompress plugin that allows remote attackers to write arbitrary files by supplying malicious archive member paths. Attackers can...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-113613 - FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin

VERWANDTEARTIKEL

CVE-2026-113703 - SuggestArr before 3.0.0 Authentication Bypass via X-Forwarded-For Spoofing

CVE-2026-90800 - Apache CouchDB: Auth bypass in prefixed _users and _replicator databases

CVE-2026-113678 - Froxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cron

Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution

CVE-2026-86471 - Apache CouchDB: Admin credentials leading to code execution as operating system user

Qilin and INC Ransomware Groups Exploit Palo Alto Networks Flaw to Bypass MFA