{"vulnerability": "cve-2026-10811", "sightings": [{"uuid": "6026b8cc-3c57-4412-820f-8c223f8b0de4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108119", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117411991365542317", "content": "CVE-2026-108119 Busybox: busybox: tar extraction-root escape via deferred symlink/hardlink creation bypasses cve-2026-26158 fix A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate that the resolved destination remains inside the extraction directory once the deferred link is created. An attacker can craft a tar archive using a symlink target of exactly '..' combined with a deferred hardlink to create a new file outside the extraction directory, or reuse an extraction directory across two archives to replace an existing file outside it. If the archive is extracted with elevated privileges, this flaw can lead to privilege escalation or arbitrary code execution.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108119https://access.redhat.com/security/cve/CVE-2026-108119https://bugzilla.redhat.com/show_bug.cgi?id=2548611#RedHat #RedHatEnterpriseLinux6 #RedHatHardenedImages#CVE_2026_108119#bot", "creation_timestamp": "2026-10-09T16:53:30.188946Z"}, {"uuid": "f2133ce8-a009-458c-8c2f-0e65aa2aff99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108113", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mxhrcl3c2w2y", "content": "\ud83d\udfe0 CVE-2026-108113 - High (8.8)\n\nILIAS before 9.24, 10.12, and 11.5 contains an unrestricted file upload vulnerability in QTI ques...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-108113/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-10-09T20:01:41.770611Z"}, {"uuid": "0816db53-08ce-43d7-8622-c5959e9c7cf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108113", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mxilzzrzxl2l", "content": "CVE-2026-108113\nIn older versions of ILIAS, a feature used to import quiz questions lets users with import rights place any file on the server, including code files. An attacker could upload a script that runs on the web\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-10-10T04:00:06.054669Z"}, {"uuid": "93f30860-33d9-4d54-8b5e-e6c7fee03153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108114", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117417064886915144", "content": "CVE-2026-108114 Strapi 5.47.0 through 5.57.0 Improper Authorization via Admin API Token Field Permissions Strapi 5.47.0 through 5.57.0 contains an improper authorization vulnerability that allows admin API tokens to retain all-field Content Manager access after the owner's role is field-restricted. Because reconcileTokenPermissionsToUserCeiling ignores token permissions with omitted or null fields, token holders can keep reading content fields an administrator removed from the role.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108114https://hackmd.io/@haind/strapi-admin-token-field-ceilinghttps://github.com/strapi/strapihttps://github.com/strapi/strapi/blob/v5.57.0/packages/core/admin/server/src/services/api-token.ts#L488-L498https://www.vulncheck.com/advisories/strapi-5.47.0-through-5.57.0-improper-authorization-via-admin-api-token-field-permissions#strapi#CVE_2026_108114#bot", "creation_timestamp": "2026-10-10T14:23:45.992741Z"}, {"uuid": "b3942b13-e283-40ea-8b65-0dce655408a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-108115", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117417067526457034", "content": "CVE-2026-108115 Kortix Suna 0.10.7 before 0.13.52 SSRF Guard Bypass via IPv6 6to4 Addresses Kortix Suna 0.10.7 before 0.13.52 contains a server-side request forgery vulnerability that allows project managers to bypass the isPrivateIp guard by supplying IPv6 6to4 or Teredo addresses that embed private IPv4 destinations. Attackers holding project.connector.write can set connector base_url, OpenAPI, Postman, or MCP URLs to reach internal services and cloud metadata endpoints and read responses.\nhttps://www.cve.org/CVERecord?id=CVE-2026-108115https://hackmd.io/@haind/suna-ssrf-6to4-guard-bypasshttps://github.com/kortix-ai/sunahttps://github.com/kortix-ai/suna/blob/v0.13.45/apps/api/src/shared/ssrf-guard.ts#L98-L113https://github.com/kortix-ai/suna/commit/9c949e4d876cd5acf7b23b0a9ee49ca5c53f1332https://github.com/kortix-ai/suna/releases/tag/v0.13.52https://www.vulncheck.com/advisories/kortix-suna-0.10.7-before-0.13.52-ssrf-guard-bypass-via-ipv6-6to4-addresses#kortix-ai #suna#CVE_2026_108115#bot", "creation_timestamp": "2026-10-10T14:24:26.326092Z"}]}