PULSE
ES
FEED
ransombyod reclama a IHG Hotels & Resorts (Estate) · GB · Hospitalityransomaoqin reclama a SILIKO d.o.o. · SI · Manufacturingransomaoqin reclama a Petroshahd(Enap Sipetrol International - Egypt Branch) · CL · Energy & Utilitiesransomaoqin reclama a Nextron Technology · CN · Technologyransomaoqin reclama a Goldsmith & Hull · US · Professional Servicesransomincransom reclama a fidepartners.com · ES · Financial Servicesransomincransom reclama a roundglass.com · US · Healthcareransomincransom reclama a butler.legal · US · Professional Servicesransomincransom reclama a innovativedriven.com · US · Technologyransomincransom reclama a bliss1041.com · USransomscarlettgroup reclama a medinahealthcare.net · Healthcareransomincransom reclama a hillandbeyer.com · US · Professional Servicesransomchaos reclama a darrequipment.com · US · Manufacturingransomwhitearmor reclama a Project Trojan Horse · Otherransombyod reclama a IHG Hotels & Resorts (Estate) · GB · Hospitalityransomaoqin reclama a SILIKO d.o.o. · SI · Manufacturingransomaoqin reclama a Petroshahd(Enap Sipetrol International - Egypt Branch) · CL · Energy & Utilitiesransomaoqin reclama a Nextron Technology · CN · Technologyransomaoqin reclama a Goldsmith & Hull · US · Professional Servicesransomincransom reclama a fidepartners.com · ES · Financial Servicesransomincransom reclama a roundglass.com · US · Healthcareransomincransom reclama a butler.legal · US · Professional Servicesransomincransom reclama a innovativedriven.com · US · Technologyransomincransom reclama a bliss1041.com · USransomscarlettgroup reclama a medinahealthcare.net · Healthcareransomincransom reclama a hillandbeyer.com · US · Professional Servicesransomchaos reclama a darrequipment.com · US · Manufacturingransomwhitearmor reclama a Project Trojan Horse · Other
← All CVEs
CVE WatchNov 4, 2026

CVE-2026-120641

CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths. The name returned

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Published: Nov 4, 2026 · Last modified: Nov 4, 2026 · CWE-22

EPSS · 30d

Not enough EPSS history yet.

Technical description

CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths. The name returned for an uploaded file is the filename parameter of the part's Content-Disposition header, unchanged. An application that saves the upload under this name can be made to write outside the intended directory.

Official references
Related CVEs
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-921978.8 HIG
—
———Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The specific flaw exists within the unzipFile method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29901.8hCVE-2026-921958.8 HIG
—
———Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The specific flaw exists within the loadEvolveLicense script. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29232.8hCVE-2026-921948.8 HIG
—
———Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The specific flaw exists within the loadManageServerLicense script. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29231.8hCVE-2026-921928.8 HIG
—
———Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The specific flaw exists within the installLicense script. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29215.8hCVE-2026-921878.8 HIG
—
———Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The specific flaw exists within the extractAndCreateUploadInfoList method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29039.8hCVE-2026-921868.8 HIG
—
———Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Quest Foglight for Databases. Authentication is required to exploit this vulnerability. The specific flaw exists within the paFnUploadFileAndCreateInfo script. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-29038.8h