CVE-2026-85812
Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information loca
CVSS
5.5
Medium
EPSS
0.4%
p31
KEV
—
Exploit Today
9
0-100
Published: Oct 13, 2026 · Last modified: Oct 13, 2026 · CWE-552
Not enough EPSS history yet.
Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1026958.2 HIG—
——0OmniFaces is a utility library for Faces. In OmniFaces versions before 1.14.3, 2.7.33, 3.14.23, 4.7.12, and 5.4.2, CombinedResourceHandler accepts a structurally valid deflated and base64 encoded combined resource ID without verifying that the server issued it. A forged ID can cause unbounded decoded output, add unique reconstructed IDs to a process-lifetime cache, or combine resources other than stylesheets and scripts. Because jakarta.faces.RESOURCE_EXCLUDES is not applied by this custom resolution path, a forged ID can disclose Facelets source from the webapp resource tree or META-INF/resources. In a deployment configured with the wildcard CDN mapping, a forged ID that selects omnifaces.graphic can also cause a blind, deployment-dependent server-side fetch whose destination derives partly from the request Host header. The flaw does not provide arbitrary file read or establish arbitrary-scheme or arbitrary-destination SSRF. The shared authenticity failure permits memory exhaustion and limited resource disclosure. This issue is fixed in versions 1.14.3, 2.7.33, 3.14.23, 4.7.12, and 5.4.2.1dCVE-2026-108070——
——0A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources.1dCVE-2026-968575.5 MED31.3%
——9Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally.2dCVE-2026-881376.5 MED60.5%
——18Files or directories accessible to external parties in WebDAV allows an authorized attacker to disclose information over a network.2dCVE-2026-858406.5 MED60.5%
——18Files or directories accessible to external parties in Windows Event Viewer allows an authorized attacker to disclose information over a network.2dCVE-2026-109162—41.8%
——13Forms using FileUpload or ImageUpload elements with a custom saveToFileMount configured stored uploaded files in the default storage folder 1:/user_upload/ instead of the configured destination. This could cause uploaded files to end up in a publicly accessible storage even though a restricted, non-public storage had been configured. Files stored this way are served directly, without the access checks applied to non-public storages. Forms that use the default value for saveToFileMount are not affected. This issue affects TYPO3 CMS versions 14.0.0-14.3.8.1d