CVE-2026-115932 - Path traversal in post media lets any registered user read server files
CVE ID :CVE-2026-115932 Published : Oct. 24, 2026, 1:16 p.m. | 1 hour, 2 minutes ago Description :When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it does not check that the file lies inside the upload directory. A registered...