CVE-2026-29059: Windmill Path Traversal Vulnerability
A high-severity unauthenticated path traversal flaw in Windmill's get_log_file endpoint allows arbitrary file read. Exploitation can expose SUPERADMIN_SECRET leading to RCE. Patched…
Tag: File Read
CVE-2026-10816: Citrix NetScaler Unauthenticated Arbitrary File Read Vulnerability
An external control of file name vulnerability in Citrix NetScaler ADC and Gateway allowing unauthenticated arbitrary file read when management access is…
CVE-2026-41950: Authorization Bypass in Dify File Read Within Tenant
An authorization bypass vulnerability (CVSS 6.5) in Dify that allows authenticated users to read the full contents of files uploaded by other…