CVE-2026-78xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
637 records · Page 5 of 7
- CVE-2026-78312: Path Traversal in DIAEnergie 9.1 Critical
Path Traversal in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.
Updated SQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.
UpdatedAuthorization Bypass Through User-Controlled Key in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.
UpdatedSQL Injection vulnerability in DIAEnergie. This issue affects DIAEnergie: before 1.11.00.022.
Updated- CVE-2026-78308: Authentication Bypass in DIAEnergie 9.8 Critical
Improper Authentication vulnerability in DIAEnergie allows Authentication Bypass. This issue affects DIAEnergie: before 1.11.00.022.
Updated DJI drones expose an unauthenticated DUML command interface over Bluetooth that allows an attacker within Bluetooth range to modify Wi-Fi configuration parameters, including the SSID, PSK, MAC address, regulatory country code, and wireless channel. An attacker can overwrite the Wi-Fi PSK with a known value and connect to the drone's internal Wi-Fi network, potentially gaining access to the flight
UpdatedThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Updated · Rejected recordJoomla Extension - joomshaper.com - Unvalidated Email Destination & Form Manipulation in Booking Requests in SP Property < 4.1.4 - Booking inquiries previously relied on client-submitted hidden fields for recipient routing, allowing potential email manipulation.
UpdatedJoomla Extension - joomshaper.com - Unauthenticated Stored Cross-Site Scripting (XSS) via Unescaped Output in Views and Admin Lists in SP Property < 4.1.4 - Multiple template files across frontend views and administrator list tables rendered attributes and text values directly into HTML without contextual escaping.
UpdatedA malformed zone may contain an NS or DNAME node above its origin, which `named` treats as a zone cut. If an attacker inserts a malformed zone into a BIND authoritative server (e.g., via zone transfer), queries for names inside the configured zone then lose authoritative status and return an out-of-zone delegation. On a server that also provides recursion BIND can follow this locally sourced cut a
UpdatedIn Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract files to locations outside of the pack, allowing writing of arbitrary files to other locations on disk.
Updated- CVE-2026-78296: WordPress FluentAuth plugin <= 2.1.2 - Email Verification Bypass vulnerability 5.3 Medium
Insufficient Verification of Data Authenticity vulnerability in WP ManageNinja LLC FluentAuth allows Identity Spoofing. This issue affects FluentAuth: from n/a through 2.1.2.
Updated Unauthenticated Cross Site Request Forgery (CSRF) in Xagio SEO <= 7.1.0.43 versions.
Updated- CVE-2026-78294: WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
Contributor Cross Site Scripting (XSS) in Geo Mashup <= 1.13.21 versions.
Updated - CVE-2026-78293: WordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability 7.1 High
Unauthenticated Cross Site Scripting (XSS) in WP w3all phpBB <= 3.0.6 versions.
Updated - CVE-2026-78292: WordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability 9.8 Critical
Unauthenticated PHP Object Injection in Hash Form <= 1.4.1 versions.
Updated - CVE-2026-78291: WordPress RepairBuddy plugin <= 4.1223 - Broken Access Control vulnerability 5.3 Medium
Unauthenticated Broken Access Control in RepairBuddy <= 4.1223 versions.
Updated - CVE-2026-78290: WordPress Magazine Blocks plugin <= 1.8.6 - Cross Site Scripting (XSS) vulnerability 6.5 Medium
Contributor Cross Site Scripting (XSS) in Magazine Blocks <= 1.8.6 versions.
Updated - CVE-2026-78289: WordPress CozyStay theme <= 1.10.0 - Cross Site Scripting (XSS) vulnerability 7.1 High
Unauthenticated Cross Site Scripting (XSS) in CozyStay <= 1.10.0 versions.
Updated - CVE-2026-78288: WordPress Beautiful Taxonomy Filters plugin <= 2.4.6 - SQL Injection vulnerability 9.3 Critical
Unauthenticated SQL Injection in Beautiful Taxonomy Filters <= 2.4.6 versions.
Updated - CVE-2026-78286: WordPress Geo Controller plugin <= 8.9.8 - PHP Object Injection vulnerability 9.8 Critical
Unauthenticated PHP Object Injection in Geo Controller <= 8.9.8 versions.
Updated - CVE-2026-78285: WordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability 8.5 High
Subscriber SQL Injection in Like Button Rating <= 2.6.61 versions.
Updated - CVE-2026-78284: WordPress MasterStudy LMS plugin <= 3.7.42 - Arbitrary File Deletion vulnerability 8.6 High
Unauthenticated Arbitrary File Deletion in MasterStudy LMS <= 3.7.42 versions.
Updated Unauthenticated Cross Site Scripting (XSS) in Music Player for WooCommerce <= 1.8.9 versions.
Updated- CVE-2026-78282: WordPress Stripe Payments plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Stripe Payments <= 2.1.2 versions.
Updated - CVE-2026-78281: WordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability 7.1 High
Unauthenticated Cross Site Scripting (XSS) in CP Media Player <= 1.3.0 versions.
Updated Unauthenticated Cross Site Request Forgery (CSRF) in Hash Form <= 1.4.0 versions.
UpdatedUnauthenticated Cross Site Request Forgery (CSRF) in Fluent Support Pro <= 2.3.1 versions.
UpdatedSubscriber Insecure Direct Object References (IDOR) in Fluent Boards Pro <= 2.0.11 versions.
UpdatedSubscriber Server Side Request Forgery (SSRF) in FluentCRM Pro <= 3.1.12 versions.
Updated- CVE-2026-78276: WordPress Fluent Boards Pro plugin <= 2.0.11 - PHP Object Injection vulnerability 7.2 High
Editor PHP Object Injection in Fluent Boards Pro <= 2.0.11 versions.
Updated - CVE-2026-78275: WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Deletion vulnerability 6.8 Medium
Editor Arbitrary File Deletion in Fluent Boards Pro <= 2.0.11 versions.
Updated - CVE-2026-78274: WordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Upload vulnerability 9.1 Critical
Editor Arbitrary File Upload in Fluent Boards Pro <= 2.0.11 versions.
Updated Subscriber Cross Site Scripting (XSS) in Fluent Boards Pro <= 2.0.11 versions.
Updated- CVE-2026-78272: WordPress Fluent Support Pro plugin <= 2.3.1 - Broken Access Control vulnerability 5.4 Medium
Subscriber Broken Access Control in Fluent Support Pro <= 2.3.1 versions.
Updated - CVE-2026-78271: WordPress FluentCRM Pro plugin <= 3.1.12 - Privilege Escalation vulnerability 7.2 High
Editor Privilege Escalation in FluentCRM Pro <= 3.1.12 versions.
Updated Author SQL Injection in FluentCRM Pro <= 3.1.12 versions.
UpdatedContributor Server Side Request Forgery (SSRF) in Shared Files <= 1.7.69 versions.
UpdatedUnauthenticated Sensitive Data Exposure in Lead Generation Contact Widget & AI Chatbot: Chat Button, Phone Call, Telegram, Email – SiteLeads <= 1.2.0 versions.
Updated- CVE-2026-78267: WordPress TranslatePress plugin <= 3.3.2 - Privilege Escalation vulnerability 9.8 Critical
Unauthenticated Privilege Escalation in TranslatePress <= 3.3.2 versions.
Updated - CVE-2026-78266: WordPress AutomatorWP plugin <= 5.8.3 - Broken Access Control vulnerability 6.5 Medium
Subscriber Broken Access Control in AutomatorWP <= 5.8.3 versions.
Updated - CVE-2026-78265: WordPress The Events Calendar plugin <= 6.17.2 - PHP Object Injection vulnerability 9.8 Critical
Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.
Updated - CVE-2026-78264: WordPress Toolset Blocks plugin <= 1.6.26 - Cross Site Scripting (XSS) vulnerability 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Toolset Blocks <= 1.6.26 versions.
Updated Unauthenticated Cross Site Scripting (XSS) in Event Tickets <= 5.29.2.1 versions.
Updated- CVE-2026-78262: WordPress WP Project Manager plugin <= 4.0.6 - PHP Object Injection vulnerability 9.8 Critical
Unauthenticated PHP Object Injection in WP Project Manager <= 4.0.6 versions.
Updated Unauthenticated Cross Site Scripting (XSS) in Realtyna Organic IDX plugin <= 5.4.1 versions.
UpdatedUnauthenticated SQL Injection in Epayco <= 8.4.6 versions.
Updated- CVE-2026-78259: WordPress WPLegalPages plugin <= 3.7.0 - Broken Authentication vulnerability 7.3 High
Unauthenticated Broken Authentication in WPLegalPages <= 3.7.0 versions.
Updated Unauthenticated Broken Access Control in Booking and Rental Manager <= 2.7.5 versions.
UpdatedContributor PHP Object Injection in Booking and Rental Manager <= 2.7.5 versions.
UpdatedThe HTTP media server running on DJI drones serves stored photos and videos through the `/v2` endpoint without authenticating the requesting client. Filenames follow a predictable pattern, allowing an attacker who joins the drone's internal network to enumerate valid filenames and exfiltrate stored photos and videos. The exposed media may reveal sensitive information, including private locations,
Updated- CVE-2026-78254: Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write 7.4 High
The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide relative paths that allow it to write outside of the dedicated target directory for the download, making it possible to overwrite files of the attacker's choice using the permissions of the user running Ant in versions prior to Ant 1.10.18. In order to exploit this vulnerability, the se
Updated Uncontrolled recursion in QXmlStreamReader::readElementText() in Qt Group Qt allows attackers to cause a denial of service (application crash via stack exhaustion) via a crafted XML document.
UpdatedGitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user could have induced a targeted user to perform unintended state-changing HTTP requests due to improper sanitization of user-controlled data in the Markdown JSON table renderer.
Updated- CVE-2026-78251: DJI Drone FTP Service Allows Unrestricted Storage Consumption of the /blackbox Directory 9.3 Critical
DJI drones contain an FTP service that uses hardcoded credentials shared across affected models and permits authenticated users to upload files without limits on file size, file count, or total storage consumed in **/blackbox/upgrade/**, as well as overwrite existing files in that directory. An attacker with access to the drone's internal network or USB RNDIS interface can exhaust the available st
Updated A vulnerability was identified in bytebot-ai bytebot 0.0.1. The affected element is an unknown function of the component Agent Execution Workflow. Such manipulation leads to infinite loop. The attack may be performed from remote. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer.
UpdatedA path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, Apeos C3567 1.1.3, or other products listed, specifically in the handling of externally supplied parameters. If the device receives a specially crafted, malicious request, it may trigger unintended processing.
UpdatedA vulnerability was determined in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/admin/ajax.php?action=save_settings. This manipulation of the argument Name causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.
UpdatedA vulnerability was found in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=confirm_order. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.
Updated- CVE-2026-78246: itsourcecode Online Clinic Management System Admin Login login.php sql injection 6.9 Medium
A vulnerability has been found in itsourcecode Online Clinic Management System 1.0. This vulnerability affects unknown code of the file success/login.php of the component Admin Login. The manipulation of the argument Username leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.
Updated A flaw has been found in itsourcecode Online Pharmacy System 1.0. This affects the function move_uploaded_file of the file all_users/register.php of the component User Registration. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack may be launched remotely. The exploit has been published and may be used.
UpdatedA vulnerability was detected in itsourcecode Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file search.php. Performing a manipulation of the argument search/delivery_type/search_price/property_type results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.
UpdatedApache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribute, for a user specified in the pod the server crashes if a membership record does not start with "CN=". This only affects install that have the non default LDAP group provider
Updated- CVE-2026-78242: Apache APISIX: data-mask may fail to redact request headers in logger output 5.7 Medium
Insertion of sensitive information into log file vulnerability in Apache APISIX. This vulnerability can cause the unmasked header value to be written to the log sink under a certain response structure. This issue affects Apache APISIX: 3.17.0. Users are recommended to upgrade to version 3.18.0, which fixes the issue.
Updated Xiiaozet LK100W exposes a critical management function that can be invoked without authentication, allowing a remote attacker to enable administrative services that should be restricted. Successful exploitation may permit unauthorized access to the device.
UpdatedSOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product.
UpdatedInsufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended.
UpdatedAn insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication (XPC) while masquerading as an Apple-signed process.
UpdatedA flaw was found in hawtio-operator. The operator reads the OpenShift Service CA private signing key from the openshift-service-ca namespace and uses it to mint client certificates with a Subject Common Name (CN) supplied by the author of a namespaced Hawtio custom resource. Because the operator ships a ClusterRole that aggregates Hawtio CR permissions into the edit and admin roles, any user with
UpdatedWhen OpenID sign-in is enabled, Gitea processes unauthenticated assertion parameters and sends an HTTP POST request to the caller-supplied OpenID provider endpoint during verification. An attacker controls the destination and much of the form body, allowing interaction with internal HTTP services reachable from the Gitea server. The response is not returned to the attacker, so the issue is blind S
UpdatedAshAi exposes Ash read actions to language-model tool calls. The read tool accepts an aggregate result type (min, max, sum, avg) that builds an ad-hoc Ash.Query.Aggregate over a named field and returns its raw value. Ash field policies redact forbidden fields on returned records (replacing them with %Ash.ForbiddenField{}), but that redaction does not apply to aggregate values. A tool caller could
UpdatedImage Scanner Driver for Linux contains an OS command injection vulnerability. An attacker who can log in to a Linux system where the affected product is installed may execute an arbitrary OS command by making certain preparations.
Updated- CVE-2026-78228: Unbounded handle_error recursion enables denial of service in AshOban triggers 5.9 Medium
Uncontrolled Recursion vulnerability in ash-project ash_oban allows a user who can drive a trigger's on_error action to fail on the final attempt to exhaust worker CPU and memory, denying service. The generated worker's atomic handle_error/4 runs the trigger's on_error action on a job's final attempt inside a rescue that, when the action itself raises, calls handle_error/4 again with the same job
Updated NLnet Labs Unbound 1.22.0 up to and including 1.26.1, has a use-after-free vulnerability when compiled for DNS-over-QUIC support with '--with-libngtcp2'. Each DoQ stream owns an output buffer that holds the DNS response. ngtcp2's retransmission buffer keeps a shallow pointer into the output buffer for as long as a STREAM frame may be resent. On a client RESET_STREAM, the output buffer is freed but
UpdatedA hardcoded cryptographic server key vulnerability exists in the deployer-ng Update Controller component of Wärtsilä FOS-Onboard.
UpdatedThe XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can allow data exfiltration and denial-of-service attacks.
Updated- CVE-2026-78223: Token revocation record built from unverified JWT claims in AshAuthentication 6.9 Medium
Improper Verification of Cryptographic Signature vulnerability in team-alembic AshAuthentication allows a caller of the token revocation action to neutralise a revocation or write arbitrary rows into the token resource. AshAuthentication.TokenResource.RevokeTokenChange.change/3 reads the :token argument and decodes it with AshAuthentication.Jwt.peek/1, which delegates to Joken.peek_claims/1 and p
Updated A vulnerability exists in NGINX JavaScript where a malformed HTTP response received by ngx.fetch() can crash an NGINX worker when trusted JavaScript reads Response.statusText. Exploitation requires control or influence over the fetched HTTP response. Impact: This vulnerability may allow remote attackers to cause a denial-of-service (DoS) on the NGINX system. There is no control plane exposure; th
UpdatedAn incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs.
Updated- CVE-2026-78216: AshLua eval read operations can read field-policy-protected fields via aggregates 6.0 Medium
AshLua exposes Ash read actions to Lua scripts run through an eval action. A read call accepts an operation (list, min, max, first, sum, avg) that builds an ad-hoc Ash.Query.Aggregate over a named field and returns its raw value. Ash field policies redact forbidden fields on returned records (replacing them with %Ash.ForbiddenField{}), but that redaction does not apply to aggregate values. A scri
Updated An authentication bypass vulnerability exists in the protection of Actuator endpoints. The application determines whether authentication is required by matching the incoming request path against protected Actuator paths. By sending a specially crafted request containing a percent-encoded path, a remote unauthenticated attacker can cause the security check to fail to recognize the request as target
UpdatedHeptabase developed by Hepta Platforms, Inc. has a Stored Cross-Site Scripting vulnerability. Authenticated remote attackers can inject persistent malicious content into specific pages, causing arbitrary JavaScript code to execute when other users click the crafted content.
Updated4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files.
Updated4MOSAn GCB Doctor developed by 4MOSAn Security Technology has a OS Command Injection vulnerability. Unauthenticated remote attackers can inject malicious commands through an unremoved ADOdb test page parameter, thereby executing arbitrary system commands on the server.
UpdatedIn affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts in an environment without possessing the required authorization.
Updatedexceljs through 4.4.0 fails to neutralize leading equals, plus, minus, or at signs in cell values written to CSV output. Attackers who can influence exported cell values can inject formulas that execute when the CSV file is opened in a spreadsheet application, potentially exfiltrating data or performing other malicious actions.
Updatedexceljs through 4.4.0 contains a path traversal vulnerability in the Workbook.addImage() function that fails to validate file paths. Attackers can supply arbitrary file paths to read any file accessible to the Node.js process and embed it in the generated workbook.
Updated- CVE-2026-78207: exceljs through 4.4.0 Prototype Pollution via deepMerge Reached From Note Serialization 9.3 Critical
exceljs through 4.4.0 contains a prototype pollution vulnerability in the deepMerge helper that fails to reject __proto__, constructor, or prototype keys when merging note objects. Attackers can assign parsed JSON with a malicious __proto__ property to cell notes, modifying Object.prototype and affecting all plain objects created in the process.
Updated exceljs through 4.4.0 decompresses all entries from supplied xlsx archives into memory without limits on entry size, total size, or compression ratio. Attackers can upload highly compressed workbooks that expand to gigabytes in memory, exhausting available resources and causing denial of service.
UpdatedBentoML's outbound connection safeguard (make_safe_connect in _internal/utils/uri.py) blocks private, loopback, and link-local IP addresses but fails to reject the RFC 6598 shared address space (100.64.0.0/10, CGNAT). In versions 1.4.19 through 1.4.39, an unauthenticated attacker can supply URLs pointing to that range via multipart file handling (MultipartSerde.ensure_file) or JSON request parsing
Updated- CVE-2026-78204: Ghostwriter through 7.2.6 Missing Authorization on Report Template Lint Endpoints 5.3 Medium
Ghostwriter through 7.2.6 does not apply per-object authorization on its report template lint endpoints. RoleBasedAccessControlMixin.test_func returns only request.user.is_active unless a view overrides it, and neither the endpoint that lints a report template nor the endpoint that returns stored lint results provides an override, so each resolves a ReportTemplate from a caller-supplied primary ke
Updated Ghostwriter before 7.1.2 fails to validate template ownership in the report template swap endpoint, allowing attackers to attach client-scoped templates from other clients to their own reports. Attackers can exploit sequential template primary keys to enumerate and attach foreign templates, then generate reports to disclose template contents including letterhead, boilerplate, and methodology text.
Updated- CVE-2026-78202: itsourcecode Payroll System admin_class.php save_settings unrestricted upload 6.9 Medium
A vulnerability was found in itsourcecode Payroll System 1.0. This affects the function save_settings of the file admin_class.php. The manipulation of the argument img results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used.
Updated A vulnerability has been found in itsourcecode Payroll System 1.0. The impacted element is the function Login of the file admin_class.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
UpdatedA flaw has been found in itsourcecode Library Management System 1.0. The affected element is an unknown function of the file editbooks.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.
Updated- CVE-2026-78199: SourceCodester Simple Online Food Ordering System view_prod.php sql injection 6.9 Medium
A vulnerability was detected in SourceCodester Simple Online Food Ordering System 1.0. Impacted is an unknown function of the file /fos/view_prod.php. Performing a manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.
Updated - CVE-2026-78198: SourceCodester Simple Online Food Ordering System ajax.php add_to_cart sql injection 6.9 Medium
A security vulnerability has been detected in SourceCodester Simple Online Food Ordering System 1.0. This issue affects some unknown processing of the file /fos/admin/ajax.php?action=add_to_cart. Such manipulation of the argument pid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.
Updated - CVE-2026-78197: SourceCodester Simple Online Food Ordering System ajax.php save_user sql injection 6.9 Medium
A weakness has been identified in SourceCodester Simple Online Food Ordering System 1.0. This vulnerability affects unknown code of the file /fos/admin/ajax.php?action=save_user. This manipulation of the argument Username causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be used for attacks.
Updated A security flaw has been discovered in achorein expo-share-intent up to 8.0.0. This affects the function getDataColumn of the file ExpoShareIntentModule.kt of the component Android File Copy Routine. The manipulation of the argument _display_name results in path traversal. The attack requires a local approach. Upgrading to version 8.0.1 is able to mitigate this issue. The patch is identified as c6
UpdatedRejecting as a duplicate of CVE-2026-78047
Updated · Rejected record