Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support and 6 more products — RHSA-2026:89849 Clear all filters
TI-2026-63925 CVE-2026-97024

Flatpak: flatpak: arbitrary write in root context via path traversal in deploy directory files/etc

Priority LOW 32

A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a malicious Flatpak app to cause certain host system files (such as passwd, group, machine-id, or resolv.conf)…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0047 Published 2026-09-29 Partial fix · 1.16.0-9.el10_2.6, 1.16.0-5.el10_0.8 +5 CWE-61
TI-2026-63924 CVE-2026-97023

Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin

Priority LOW 32

A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows a malicious Flatpak app to cause deletion of attacker-chosen files outside the deployment directory when the a…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00461 Published 2026-09-28 Partial fix · 1.16.0-9.el10_2.6, 1.16.0-5.el10_0.8 +5 CWE-61