flipped-aurora CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH flipped-aurora CVE published 2026-10-21

CVE-2026-114492

CVE-2026-114492 is a high-severity path traversal vulnerability in gin-vue-admin through version 2.9.2. Authenticated administrators can delete arbitrary directories by supplying traversal sequences in the pluginName parameter of the removePlugin endpoint. This vulnerability allows attackers to send a crafted POST request to /autoCode/removePlugin with '../' sequences, causing os.RemoveAll to delete any d [truncated]