https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:35:23 +0000 https://cve.radiocsirt.org/vuln/cve-2026-63358 <p><strong>Affected:</strong> FileGator</p> <p>FileGator accepts arbitrary Unix permission values via the &#39;/chmoditems&#39; API endpoint and passes the value directly to PHP&#39;s native &#39;chmod()&#39; function through &#39;octdec()&#39; conversion, with no validation. This allows an authenticated user with &#39;chmod&#39; permission to upgrade their privileges to root.</p> <p><strong>Affected:</strong> FileGator</p> <p>FileGator accepts arbitrary Unix permission values via the &#39;/chmoditems&#39; API endpoint and passes the value directly to PHP&#39;s native &#39;chmod()&#39; function through &#39;octdec()&#39; conversion, with no validation. This allows an authenticated user with &#39;chmod&#39; permission to upgrade their privileges to root.</p> https://cve.radiocsirt.org/vuln/cve-2026-63358