Fortinet Sandbox Flaws Under Active Exploitation

Critical Fortinet Sandbox vulnerabilities are under active attack, with hackers exploiting flaws like CVE-2026-39813, a severe path traversal bug that allows authentication bypass. Fortinet patched these bugs in April, but users must upgrade ASAP to avoid being compromised.

https://osintsights.com/fortinet-sandbox-flaws-under-active-exploitation?utm_source=mastodon&utm_medium=social

#Fortinet #Fortisandbox #Cve202639813 #PathTraversal #AuthenticationBypass

Attackers Exploit Langflow Path Traversal Flaw in Active Attacks

A single, unauthenticated request is all it takes to exploit a high-severity flaw in Langflow, a popular AI development platform, allowing attackers to write arbitrary files to its filesystem. This is made possible by a path traversal vulnerability, CVE-2026-5027, which can be easily triggered due to Langflow's default…

https://osintsights.com/attackers-exploit-langflow-path-traversal-flaw-in-active-attacks?utm_source=mastodon&utm_medium=social

#Langflow #PathTraversal #Cve20265027 #AiDevelopment #VulnerabilityExploitation

Langflow Vulnerability Exploited for Unauthenticated Remote Code Execution

A single, unauthenticated request is all it takes to exploit a high-severity flaw in Langflow, allowing attackers to execute remote code without needing any login credentials. This vulnerability, tracked as CVE-2026-5027, enables malicious actors to write files to any location on a host…

https://osintsights.com/langflow-vulnerability-exploited-for-unauthenticated-remote-code-execution?utm_source=mastodon&utm_medium=social

#LangflowVulnerability #UnauthenticatedRemoteCodeExecution #Cve20265027 #PathTraversal #EmergingThreats

Notepad++ Zero-Click RCE via Path Traversal (CVE-2026-52884)

https://github.com/notepad-plus-plus/notepad-plus-plus/security/advisories/GHSA-p58x-r3c9-x9p6

#HackerNews #Notepad++ #ZeroClick #RCE #PathTraversal #CVE2026 #52884 #Cybersecurity

🚨 Luka w Apache MINA SSHD (CVE-2026-48827) pozwala na odczyt plików

Wykryto lukę path traversal w popularnej bibliotece Java do obsługi SSH. Umożliwia ona uwierzytelnionym użytkownikom dostęp do repozytoriów Git poza wyznaczonym katalogiem, stwarzając ryzyko wycieku kodu źródłowego.

→ https://cyberowi.pl/luka-w-apache-mina-sshd-cve-2026-48827-pozwala-na-odczyt/

#cve #apachemina #pathtraversal #java

#cyberbezpieczenstwo

Java challenge.

Given a String of unknown origin, convert it to a Path tail such that
1) other.resolve(tail) is guaranteed to be a file or dir below other (assume sym links are not an issue)
2) the conversion fails if (1) can not be met
3) worst case, assume other and tail may be for a different FileSystem

Main problem I see: "..\\a" has one element on a Linux filesystem, but resolving it onto a Windows Path other creates a Path outside of other.

#Java #jdk #path #pathtraversal