PULSE
EN
FEED
ransompanzer reclama a Valode & Pistre · FR · Professional Servicesransompanzer reclama a Zenidoc · Professional Servicesransomn0n reclama a MarieBelle New York · US · Retail & E-Commerceransomn0n reclama a PG Group (Pure Options) · Financial Servicesransomemperador reclama a CMC AUDITORES SRL · AR · Professional Servicesransombyod reclama a Decorolala · Retail & E-Commerceransomaurora reclama a The Buckner Company, Inc. · US · Otherransomplay reclama a The Innovation Group · US · Otherransomplay reclama a DFK Group · DE · Professional Servicesransomplay reclama a Saddlers Court MFG · GB · Manufacturingransomplay reclama a Culinary Specialties · US · Agriculture and Food Productionransomplay reclama a Advanced Imaging Solutions · MN · Technologyransomorova reclama a The Park Lane Hong Kong · HK · Hospitalityransomorova reclama a Libre Wireless Technologies · IN · Technologyransompanzer reclama a Valode & Pistre · FR · Professional Servicesransompanzer reclama a Zenidoc · Professional Servicesransomn0n reclama a MarieBelle New York · US · Retail & E-Commerceransomn0n reclama a PG Group (Pure Options) · Financial Servicesransomemperador reclama a CMC AUDITORES SRL · AR · Professional Servicesransombyod reclama a Decorolala · Retail & E-Commerceransomaurora reclama a The Buckner Company, Inc. · US · Otherransomplay reclama a The Innovation Group · US · Otherransomplay reclama a DFK Group · DE · Professional Servicesransomplay reclama a Saddlers Court MFG · GB · Manufacturingransomplay reclama a Culinary Specialties · US · Agriculture and Food Productionransomplay reclama a Advanced Imaging Solutions · MN · Technologyransomorova reclama a The Park Lane Hong Kong · HK · Hospitalityransomorova reclama a Libre Wireless Technologies · IN · Technology
← Todos los CVEs
CVE Watch9 oct 2026

CVE-2026-87685

An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.

CVSS

—

Sin CVSS

EPSS

0.1%

p3

KEV

—

Exploit Today

1

0-100

Publicado: 8 oct 2026 · Última mod.: 9 oct 2026 · CWE-73

EPSS · 30d
0.1%EPSS · 30 días0.1%
2026-10-082026-10-12
Descripción técnica

An arbitrary file manipulation vulnerability exists in the WebTools management interface of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. When processing configuration transfer requests, the application fails to properly validate and sanitize a user-supplied status file path parameter. An authenticated administrative user can exploit this issue by submitting a specially crafted status file parameter, causing the underlying process to move an arbitrary system file to a predictable, world-readable temporary directory. This can lead to persistent Denial of Service (DoS), critical system file destruction, host compromise, or sensitive data leakage.

Referencias oficiales
CVEs relacionados
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-936957.4 ALT
—
——0In Progress ShareFile Storage Zones Controller v5.12.6 and below, FileCopyService uses a remote file identifier when constructing a local temporary file path without enforcing containment. This can cause FileCopyService to write attacker-controlled content to filesystem locations writable by the service account. This can result in remote code execution when an executable IIS-served directory is writable.1dCVE-2026-1086946.5 MED
16.3%
——5ConvertX through 0.19.0 contains an arbitrary file read vulnerability that allows authenticated users to read server files because src/converters/pandoc.ts invokes Pandoc without the --sandbox flag. Attackers can upload a reStructuredText document with an include directive naming an absolute path, convert it, and download output containing the referenced file's contents.3dCVE-2026-1085914.4 MED
17.7%
——5InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read server files by abusing the AI Core MCP file_upload tool's source argument. Attackers can supply file:// or php:// stream wrappers passed to file_get_contents(), storing contents on the public media disk to expose the .env file with APP_KEY and database credentials.3dCVE-2026-1081567.1 ALT
1.9%
——1LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handler that trusts the openclawSourceDir value from a skill's _meta.json during uninstall. Attackers who convince a user to install a crafted skill can make uninstallation recursively delete arbitrary user-writable directories, such as the home directory, since the security scanner never inspects _meta.json.4dCVE-2026-1073777.5 ALT
37.6%
——11datamodel-code-generator generates Python data models from schema definitions. From 0.59.0 until 0.81.0, an attacker-controlled Protobuf schema can supply absolute or parent-directory paths captured by WEAK_IMPORT_PATTERN and consumed by _write_missing_weak_imports in src/datamodel_code_generator/parser/protobuf.py. Exploitation requires a victim or automated job to process the attacker-controlled schema with Protobuf input support, which requires the grpcio-tools package. The paths escape the weak_imports temporary directory before protoc runs, allowing creation of directory trees and new files or overwrite of existing writable files with a generated Protobuf syntax declaration. The effect persists when later Protobuf compilation fails. The written content is limited to a proto2 or proto3 syntax declaration, and direct arbitrary code execution has not been demonstrated. This issue is fixed in version 0.81.0.5dCVE-2026-1065596.3 MED
22.6%
——7Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package is affected by improper input validation in confluence to markdown scaffolder module. Insufficient input validation in the Confluence to Markdown scaffolder module could allow an attacker to influence file write operations during template execution. Exploitation requires a Backstage user to run a template that processes attacker-influenced Confluence content. This issue is fixed in version 0.3.25.6d