https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T18:18:54.901406+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-108158 CVE-2026-108158 — plugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convert 2026-10-10T18:18:54.909404+00:00

Affected: mynaparrot plugNmeet-server

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted filePath values. Attackers can supply ../ sequences so text or office documents are converted into page images, then fetch them unauthenticated through /download/uploadedFile/.