TI-2026-28870 CVE-2026-40027 · GHSA-wg7x-9f3g-8524
ALEAPP NQ Vault Artifact Parser Path Traversal
Priority LOW 38
ALEAPP (Android Logs Events And Protobuf Parser) through 3.4.0 contains a path traversal vulnerability in the NQ_Vault.py artifact parser that uses attacker-controlled file_name_from values from a database directly as th…