https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T13:25:21.565234+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-65076 CVE-2025-65076 — Arbitrary File Read and Delete via Path Traversal in WaveStore Server 2026-10-18T13:25:21.566310+00:00

Affected: WaveStore Server

WaveView client allows users to execute restricted set of predefined commands and scripts on the connected WaveStore Server. A malicious attacker with high-privileges is able to read or delete any file on the server using path traversal in the ilog script. This script is being run with root privileges.

This issue was fixed in version 6.44.44