https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:29:09.297676+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2024-04519 bdu:2024-04519 2026-10-07T18:29:09.302460+00:00 bdu:2024-04519 https://cve.radiocsirt.org/vuln/euvd-2026-2262 EUVD-2026-2262 2026-10-07T18:29:09.302496+00:00 EUVD-2026-2262 https://cve.radiocsirt.org/vuln/fkie_cve-2024-3584 fkie_cve-2024-3584 2026-10-07T18:29:09.302510+00:00

qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint. By manipulating the `name` parameter through URL encoding, an attacker can upload a file to an arbitrary location on the system, such as `/root/poc.txt`. This vulnerability allows for the writing and overwriting of arbitrary files on the server, potentially leading to a full takeover of the system. The issue is fixed in version 1.9.0.

 https://cve.radiocsirt.org/vuln/ghsa-xcr2-h8hv-6227 GHSA-xcr2-h8hv-6227 — qdrant is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` e… 2026-10-07T18:29:09.302541+00:00

Affected: crates.io: qdrant

qdrant/qdrant version 1.9.0-dev is vulnerable to path traversal due to improper input validation in the `/collections/{name}/snapshots/upload` endpoint. By manipulating the `name` parameter through URL encoding, an attacker can upload a file to an arbitrary location on the system, such as `/root/poc.txt`. This vulnerability allows for the writing and overwriting of arbitrary files on the server, potentially leading to a full takeover of the system. The issue is fixed in version 1.9.0.

 https://cve.radiocsirt.org/vuln/gsd-2024-3584 gsd-2024-3584 2026-10-07T18:29:09.302566+00:00 gsd-2024-3584