Known Vulnerabilities for User Private Files by Unknown
Listed below are 10 of the newest known vulnerabilities associated with "User Private Files" by "Unknown".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-103263 json | Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links inside the stat... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-100850 json | AzuraCast before 0.23.8 contains a server-side request forgery and local file read vulnerability in the AutoDJ remote playlis... | Not Provided | 2026-09-27 | 2026-09-30 |
| CVE-2026-97332 json | The User Private Files WordPress plugin before 2.2.0 does not properly protect its stored private files on multisite install... | Not Provided | 2026-10-04 | 2026-10-04 |
| CVE-2026-95693 json | In MISP, the EventReport::uploadPicture method in processed a caller-supplied tmp_name field by invoking file_exists(), mime_... | Not Provided | 2026-09-22 | 2026-09-22 |
| CVE-2026-91127 json | File Viewer is a browser-native viewer for Office, PDF, CAD, archive, and other files in private and internal web application... | Not Provided | 2026-09-18 | 2026-09-22 |
| CVE-2026-89768 json | In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backing_file_... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-88924 json | A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newly created priva... | Not Provided | 2026-09-10 | 2026-10-01 |
| CVE-2026-81910 json | Concrete CMS 9 through 9.5.2 is vulnerable to Server-Side Template Injection (SSTI) in Theme Customizer via Unvalidated Style... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-79899 json | Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temp... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-70561 json | TestLink 1.9.20 and prior contains an insecure direct object reference vulnerability that allows any authenticated user, incl... | Not Provided | 2026-08-07 | 2026-09-24 |