https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 10:09:21 +0000 https://cve.radiocsirt.org/vuln/cve-2026-35412 <p><strong>Affected:</strong> directus</p> <p>Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, Directus&#39; TUS resumable upload endpoint (/files/tus) allows any authenticated user with basic file upload permissions to overwrite arbitrary existing files by UUID. The TUS controller performs only collection-level authorization checks, verifying the user has some permission on directus_files, but never validates item-level access to the specific file being replaced. As a result, row-level permission rules (e.g., &#34;users can only update their own files&#34;) are completely bypassed via the TUS path while being correctly enforced on the standard REST upload path. This vulnerability is fixed in 11.16.1.</p> <p><strong>Affected:</strong> directus</p> <p>Directus is a real-time API and App dashboard for managing SQL database content. Prior to 11.16.1, Directus&#39; TUS resumable upload endpoint (/files/tus) allows any authenticated user with basic file upload permissions to overwrite arbitrary existing files by UUID. The TUS controller performs only collection-level authorization checks, verifying the user has some permission on directus_files, but never validates item-level access to the specific file being replaced. As a result, row-level permission rules (e.g., &#34;users can only update their own files&#34;) are completely bypassed via the TUS path while being correctly enforced on the standard REST upload path. This vulnerability is fixed in 11.16.1.</p> https://cve.radiocsirt.org/vuln/cve-2026-35412