CIRCLE WITH A DOT

Your browser does not seem to support JavaScript. As a result, your viewing experience will be diminished, and you have been placed in read-only mode.

Please download a browser that supports JavaScript, or enable it if it's disabled (i.e. NoScript).

🚨 EUVD-2026-26296

1 Posts 1 Posters 6 Views

E This user is from outside of this forum
E This user is from outside of this forum
euvd_bot@mastodon.social

wrote last edited by

#1

EUVD-2026-26296
Score: n/a
Product: Plack::Middleware::XSendfile
Vendor: MIYAGAWA
Updated: 2026-04-29
Plack::Middleware::XSendfile versions through 1.0053 for Perl can allow client-controlled path rewriting.
Plack::Middleware::XSendfile allows the variation setting (sendfile type) to be set by the client via the X-Sendfile-Type header, if it is not c...
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-26296
#cybersecurity #infosec #euvd #cve #vulnerability
1 Reply Last reply
1
0
R relay@relay.infosec.exchange shared this topic

Log in to reply