Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 09:16:50 +0000 bdu:2025-08680 https://cve.radiocsirt.org/vuln/bdu:2025-08680 bdu:2025-08680 https://cve.radiocsirt.org/vuln/bdu:2025-08680 EUVD-2026-246311 https://cve.radiocsirt.org/vuln/euvd-2026-246311 EUVD-2026-246311 https://cve.radiocsirt.org/vuln/euvd-2026-246311 fkie_cve-2025-27022 https://cve.radiocsirt.org/vuln/fkie_cve-2025-27022 <p>A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests.</p> <p>Details:</p> <p>Lack or insufficient validation of user-supplied input allows authenticated users to access all files on the target machine file system that are readable to the user account used to run the httpd service.</p> <p>A path traversal vulnerability of the WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests.</p> <p>Details:</p> <p>Lack or insufficient validation of user-supplied input allows authenticated users to access all files on the target machine file system that are readable to the user account used to run the httpd service.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-27022 GHSA-g7cx-36jq-75p8 https://cve.radiocsirt.org/vuln/ghsa-g7cx-36jq-75p8 <p>Path traversal in WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests.</p> <p>Details:</p> <p>Lack or insufficient validation of user-supplied input allows authenticated users to access all files on the target machine file system that are readable to the user account used to run the httpd service.</p> <p>Path traversal in WebGUI HTTP endpoint in Infinera G42 version R6.1.3 allows remote authenticated users to download all OS files via HTTP requests.</p> <p>Details:</p> <p>Lack or insufficient validation of user-supplied input allows authenticated users to access all files on the target machine file system that are readable to the user account used to run the httpd service.</p> https://cve.radiocsirt.org/vuln/ghsa-g7cx-36jq-75p8