Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-85518

Openscap: openscap: arbitrary file write via path traversal in source datastream decomposition

A flaw was found in OpenSCAP. When decomposing a Source DataStream (SDS) file, the application does not properly validate relative file path attributes, leading to a path traversal vulnerability. An attacker can exploit this flaw by tricking a user or automated system into decomposing a crafted datastream containing directory traversal sequences. Successful exploitation allows unauthorized file creation or modification outside the intended target directory with the permissions of the executing process.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Openscap Red Hat Redhat
Products
Openscap Enterprise Linux Enterprise Linux and 3 more
CVE-2026-122056

Openscap: one-byte heap buffer overflow in sds-compose may lead to denial-of-service

A flaw was found in OpenSCAP. A heap-based buffer overflow can occur when processing a specially crafted Extensible Configuration Checklist Description Format (XCCDF) document using the sds-compose option. An attacker could exploit this vulnerability to corrupt memory, resulting in an application crash and a Denial of Service (DoS).

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Openscap Red Hat Redhat
Products
Openscap Enterprise Linux Enterprise Linux and 3 more