CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-65768 — Improper limitation of a pathname to a restricted directory ('path traversal') i...

·Source: NIST NVD

Updated:

Executive Summary

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.

Analysis

Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network. CVSS Score: 8.8. Published: 2026-08-11T17:18:56.117.

Indicators of Compromise (1)

CVE (1)
CVE-2026-65768
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 11, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Chime considering adding stablecoin features to app

Consumer banking fintech firm Chime Financial is reportedly considering adding stablecoins as a feature in its app.

Finextra
CRITICALVulnerability

NVD CRITICAL: CVE-2026-72830 — Grav API plugin versions before 1.0.13 fail to enforce API key scope caps in Con...

Grav API plugin versions before 1.0.13 fail to enforce API key scope caps in ConfigController super-scope gates, allowing scoped keys to write scheduler configuration. Attackers with a scoped api.config.write key can inject arbitrary commands into scheduler.custom_jobs that execute via Symfony Process for remote code execution.

CVE-2026-72830
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-72829 — The Grav API plugin (getgrav/grav-plugin-api) before 1.0.13 contains an API-key ...

The Grav API plugin (getgrav/grav-plugin-api) before 1.0.13 contains an API-key scope-cap bypass in UsersController's create() and update() methods. These methods enforce the scope cap only for api.users.write, but gate super-privilege grants on a bare isSuperAdmin() check that reads access.api.super directly without consulting the key's scopes. As a result, an api.users.write-scoped key minted on

CVE-2026-72829
NIST NVD