CVE-2026-65921

HighCVSS 8.8/10Last modified Oct 24, 2026

Description

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published: Jul 27, 2026
Last modified: Oct 24, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-659225.4An authorization weakness in JFrog Artifactory internal metadata handling could allow a user with limited repository access to write to rest CVE-2026-659236.8A URL validation weakness in JFrog Artifactory Ansible repository handling could allow a user, under specific repository access conditions, CVE-2026-659246.5JFrog Artifactory support for Terraform remote repositories was found to be susceptible to Server-Side Request Forgery (SSRF). An authentica CVE-2026-659256.5A user with JFrog Artifactory Cargo remote repository read access could make Artifactory request unintended URLs and return the response.CVE-2026-659263.1An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and vers CVE-2026-659277.5Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves causes rewrite processing to restart at the sec CVE-2026-65933.5A vulnerability was found in ComfyUI up to 0.13.0. Affected by this issue is some unknown functionality of the file server.py of the compone CVE-2026-659304.8LimeSurvey Community Edition 7.0.5 contains an authenticated stored cross-site scripting vulnerability in the replacement-fields dialog used CVE-2026-659315.1LimeSurvey Community Edition 7.0.5 contains an authenticated improper authorization vulnerability in the survey menu entry creation endpoint CVE-2026-659325.3The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denial of service. See vu CVE-2026-659335.3A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information. See vulnerability B-E4 in th CVE-2026-659347.1An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module. See vulnerability B-E10 in the related pa