CVE-2026-85812
Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information loca
CVSS
5.5
Média
EPSS
0.5%
p42
KEV
—
Exploit Today
13
0-100
Publicado: 13 de out. de 2026 · Última mod.: 16 de out. de 2026 · CWE-552
0.4%EPSS · 30 dias0.5%
2026-10-142026-11-06
Files or directories accessible to external parties in Windows Bind Filter Driver allows an authorized attacker to disclose information locally.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1197579.8 CRÍ45.4%
——14BTCPay Server before 2.4.2, including 2.4.2 release candidates, contains an information disclosure vulnerability that allows unauthenticated remote attackers to retrieve .macaroon credential files for an LND (Lightning Network Daemon) node. Attackers can use the exposed macaroon to gain full control of the LND node, including moving funds, resulting in theft of funds from affected deployments.1dCVE-2026-659837.5 ALT9.0%
——3OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.2.0, interface/modules/custom_modules/oe-module-faxsms/src/Controller/SignalWireClient.php decrypts a selected patient document with Document::get_data() and SignalWireClient::uploadFileForFax() writes the plaintext bytes under sites/{siteId}/fax. The module returns the resulting public URL to SignalWire, protects it only with a predictable uniqid() filename, and never removes the staged file. An unauthenticated network actor who obtains or guesses the URL can retrieve persistent patient documents even when drive encryption is enabled. This issue is fixed in version 8.2.0.9hCVE-2026-1231975.3 MÉD36.0%
——11WPPConnect Server through 2.10.76 contains a missing authentication vulnerability that allows unauthenticated attackers to read decrypted sticker media through the /files static mount. Attackers can enumerate Unix timestamps in GET /files/file<timestamp>.webp requests to retrieve stickers from any session, bypassing per-session token checks.1dCVE-2026-906325.5 MÉD12.8%
——4Apache OpenOffice documents can include multimedia content (audio, video, etc.)
A crafted document could exploit the GStreamer multimedia component of Apache OpenOffice version through 4.1.16 to load the contents of any local file, and include them when the document is saved or exported, for example as PDF.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.3dCVE-2026-906275.5 MÉD12.8%
——4The flat file database driver in Apache Openoffice versions through 4.1.16 allows a crafted document to read the contents of any local file without asking the user.
Users are recommended to upgrade to version 4.1.17, which fixes this issue.2dCVE-2026-1205015.3 MÉD22.5%
——7An Otter Wiki 2.20.1 before 2.26.2 contains a file disclosure vulnerability in the DataTable embedding that allows attackers who can edit pages, including anonymous users under the default configuration, to read repository-internal files. Attackers can set an absolute src such as /.git/config to render the file as a table, exposing any stored remote credentials.4d