CVE Watch11 nov 2026

CVE-2026-126779

Spatie Browsershot 2.2.0 before 5.5.0 contains a local file read vulnerability that allows attackers to read server files by supplying root-

CVSS

7.5

Alto

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 11 nov 2026 · Última mod.: 11 nov 2026 · CWE-73

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Spatie Browsershot 2.2.0 before 5.5.0 contains a local file read vulnerability that allows attackers to read server files by supplying root-relative references in HTML passed to setHtml(). Attackers can embed iframe, img, link or script elements referencing paths like /etc/passwd, which resolve to file:// URLs and render file contents into the returned PDF or screenshot.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1109926.5 MED

—

———A user who can create Git Sync provisioning jobs (the Editor role by default) could delete or move files outside the configured repository path with a job that references a resource whose source path contains ../ sequences (path traversal). With a local filesystem repository on versions before 13.0.4 and 13.1.1, this reached files on the Grafana host.10h CVE-2026-1157359.6 CRÍ

8.8%

——3The Somatic Framework WordPress plugin through 1.8.14 does not perform an authorization check or validate a user-supplied file path before deleting it, allowing any authenticated user, such as a subscriber, to delete arbitrary files on the server, which can lead to a full site takeover.13h CVE-2026-1157349.6 CRÍ

8.8%

——3The Pay with a tweet WordPress plugin through 1.0.5 does not validate a file path before deleting it, nor does it restrict access to the relevant administration screens, allowing users with a role as low as Subscriber to delete arbitrary files on the server, which can lead to a full site compromise.13h CVE-2026-1199766.5 MED

53.9%

——16External control of file name or path in Visual Studio Code - GitHub Pull Requests and Issues Extension allows an unauthorized attacker to disclose information over a network.1d CVE-2026-1199397.8 ALT

30.7%

——9Improper privilege management in Windows Print Spooler Components allows an authorized attacker to elevate privileges locally.1d CVE-2026-1181517.2 ALT

65.5%

——20External control of file name or path in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.1d