HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-65810 — Relative path traversal in .NET Framework allows an unauthorized attacker to ele...

·Source: NIST NVD

Updated:

Executive Summary

Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.

Analysis

Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally. CVSS Score: 7.8. Published: 2026-08-11T17:19:00.570.

Indicators of Compromise (1)

CVE (1)
CVE-2026-65810
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 11, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Chime considering adding stablecoin features to app

Consumer banking fintech firm Chime Financial is reportedly considering adding stablecoins as a feature in its app.

Finextra
CRITICALVulnerability

NVD CRITICAL: CVE-2026-72830 — Grav API plugin versions before 1.0.13 fail to enforce API key scope caps in Con...

Grav API plugin versions before 1.0.13 fail to enforce API key scope caps in ConfigController super-scope gates, allowing scoped keys to write scheduler configuration. Attackers with a scoped api.config.write key can inject arbitrary commands into scheduler.custom_jobs that execute via Symfony Process for remote code execution.

CVE-2026-72830
NIST NVD
CRITICALVulnerability

NVD CRITICAL: CVE-2026-72829 — The Grav API plugin (getgrav/grav-plugin-api) before 1.0.13 contains an API-key ...

The Grav API plugin (getgrav/grav-plugin-api) before 1.0.13 contains an API-key scope-cap bypass in UsersController's create() and update() methods. These methods enforce the scope cap only for api.users.write, but gate super-privilege grants on a bare isSuperAdmin() check that reads access.api.super directly without consulting the key's scopes. As a result, an api.users.write-scoped key minted on

CVE-2026-72829
NIST NVD