https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T17:49:15.372932+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-108158 fkie_cve-2026-108158 2026-10-10T17:49:15.374906+00:00

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values. Attackers can supply ../ sequences so text or office documents are converted into page images, then fetch them unauthenticated through /download/uploadedFile/.

 https://vulnerability.circl.lu/vuln/ghsa-7jr3-j3rm-rx7w GHSA-7jr3-j3rm-rx7w 2026-10-10T17:49:15.374985+00:00

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values. Attackers can supply ../ sequences so text or office documents are converted into page images, then fetch them unauthenticated through /download/uploadedFile/.