EN

en direct

CVE-2026-48710 · Kludex Starlette CVE-2026-49869 · Kestra Kestra OSS CVE-2026-59822 · BerriAI LiteLLM · CVSS 8.2 CVE-2026-82329 · JFrog Artifactory

type de faiblesse

CWE-641

2: vulnérabilités suivies
5 août 2026: dernière publication

Éditeurs les plus touchés

Eclipse · 1 Microsoft · 1

cve

Veille des vulnérabilités

identifiantvulnérabilitésévéritépublié

CVE-2026-46581In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, allowing an attacker to specify a URL to a remote Facelet which will be included and processed as part of the normal request, with the privileges of the target server. This could allow access to restricted files such as `WEB-INF/web.xml` or `/etc/passwd`.Eclipse Mojarra Élevée CVSS 7.5 05/08 CVE-2026-50510Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally.Microsoft Github Copilot Élevée CVSS 7.8 14/07