<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[🔎 CVE-2026-41202: CRITICAL path traversal in ci4ms (&amp;lt;0.31.5.0) lets authenticated users upload ZIPs for remote code execution.]]></title><description><![CDATA[<p><img src="https://board.circlewithadot.net/assets/plugins/nodebb-plugin-emoji/emoji/android/1f50e.png?v=28325c671da" class="not-responsive emoji emoji-android emoji--mag_right" style="height:23px;width:auto;vertical-align:middle" title="🔎" alt="🔎" /> CVE-2026-41202: CRITICAL path traversal in ci4ms (&lt;0.31.5.0) lets authenticated users upload ZIPs for remote code execution. Patch to 0.31.5.0 now! Details: <a href="https://radar.offseq.com/threat/cve-2026-41202-cwe-22-improper-limitation-of-a-pat-c7627c61" rel="nofollow noopener"><span>https://</span><span>radar.offseq.com/threat/cve-20</span><span>26-41202-cwe-22-improper-limitation-of-a-pat-c7627c61</span></a> <a href="https://infosec.exchange/tags/OffSeq" rel="tag">#<span>OffSeq</span></a> <a href="https://infosec.exchange/tags/infosec" rel="tag">#<span>infosec</span></a> <a href="https://infosec.exchange/tags/CVE202641202" rel="tag">#<span>CVE202641202</span></a> <a href="https://infosec.exchange/tags/vuln" rel="tag">#<span>vuln</span></a></p>

<div class="row mt-3"><div class="col-12 mt-3"><img class="img-thumbnail" src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/532/473/438/507/913/original/7bb86084ffb923b6.png" alt="Link Preview Image" /></div></div>]]></description><link>https://board.circlewithadot.net/topic/d0868773-2b03-47ff-9dfc-bf7948482cba/cve-2026-41202-critical-path-traversal-in-ci4ms-lt-0.31.5.0-lets-authenticated-users-upload-zips-for-remote-code-execution.</link><generator>RSS for Node</generator><lastBuildDate>Thu, 14 May 2026 22:29:33 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/d0868773-2b03-47ff-9dfc-bf7948482cba.rss" rel="self" type="application/rss+xml"/><pubDate>Thu, 07 May 2026 09:00:31 GMT</pubDate><ttl>60</ttl></channel></rss>