https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 04:22:51 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-366639 EUVD-2026-366639 https://cve.radiocsirt.org/vuln/euvd-2026-366639 https://cve.radiocsirt.org/vuln/fkie_cve-2026-76652 <p>An authenticated directory traversal vulnerability in file upload functionality has been identified in Archer MR600 (v2, v3 &amp; v5) and TL-MR6400 v8. Due to insufficient validation of user-supplied file information, an authenticated remote attacker with access to the affected upload functionality could upload a specially crafted file and cause it to be written outside the intended directory.</p> <p>Successful exploitation could allow an authenticated remote attacker to write files to unintended locations, potentially overwriting or modifying files accessible to the affected service; arbitrary code execution has not been demonstrated.</p> <p>An authenticated directory traversal vulnerability in file upload functionality has been identified in Archer MR600 (v2, v3 &amp; v5) and TL-MR6400 v8. Due to insufficient validation of user-supplied file information, an authenticated remote attacker with access to the affected upload functionality could upload a specially crafted file and cause it to be written outside the intended directory.</p> <p>Successful exploitation could allow an authenticated remote attacker to write files to unintended locations, potentially overwriting or modifying files accessible to the affected service; arbitrary code execution has not been demonstrated.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-76652 https://cve.radiocsirt.org/vuln/ghsa-q3j6-99qm-jjmm <p>An authenticated directory traversal vulnerability in file upload functionality has been identified in Archer MR600 (v2, v3 &amp; v5) and TL-MR6400 v8. Due to insufficient validation of user-supplied file information, an authenticated remote attacker with access to the affected upload functionality could upload a specially crafted file and cause it to be written outside the intended directory.</p> <p>Successful exploitation could allow an authenticated remote attacker to write files to unintended locations, potentially overwriting or modifying files accessible to the affected service; arbitrary code execution has not been demonstrated.</p> <p>An authenticated directory traversal vulnerability in file upload functionality has been identified in Archer MR600 (v2, v3 &amp; v5) and TL-MR6400 v8. Due to insufficient validation of user-supplied file information, an authenticated remote attacker with access to the affected upload functionality could upload a specially crafted file and cause it to be written outside the intended directory.</p> <p>Successful exploitation could allow an authenticated remote attacker to write files to unintended locations, potentially overwriting or modifying files accessible to the affected service; arbitrary code execution has not been demonstrated.</p> https://cve.radiocsirt.org/vuln/ghsa-q3j6-99qm-jjmm