CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-107935 — A path traversal vulnerability was found in gvproxy, the network forwarder provi...

·Source: NIST NVD

Updated:

Executive Summary

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system.

Analysis

A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system. CVSS Score: 9.3. Published: 2026-10-09T10:16:37.497.

Indicators of Compromise (1)

CVE (1)
CVE-2026-107935
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 9, 2026. Verified by: NIST.

Related Threats

CRITICALVulnerabilityNEW

Millions of Exploit Attempts Logged Against PHP Servers

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/millions-exploit-attempts-logged-against-php-servers-image_small-6-a-33179.jpg" align=right hspace=4><b>Urgent PHP Patching Advised as Experts See Widespread Exploit-Building Attempts</b><br>Attacks targeting the critical PHP vulnerabilities dubbed PHP2Shell and patched Wednesday are continuing to mount as hundreds of proof-of-con

Bank Info Security
MEDIUMVulnerabilityNEW

How bug bounty sharpens one researcher’s security skills

As Cybersecurity Awareness Month continues, the GitHub Bug Bounty team spotlights @r31n, diving into their research approach, favorite bug classes, and advice for aspiring hackers. The post How bug bounty sharpens one researcher’s security skills appeared first on The GitHub Blog .

GitHub Security Blog
MEDIUMVulnerability

The Current Landscape of OAuth Attacks

Unit 42 explores modern OAuth threats and actionable steps organizations can take to protect their environments. The post The Current Landscape of OAuth Attacks appeared first on Unit 42 .

Unit 42 (Palo Alto)