MontFerret CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH MontFerret CVE published 2026-04-06

CVE-2026-34783

A path traversal vulnerability in Ferret's IO::FS::WRITE standard library function allows a malicious website to write arbitrary files to the filesystem of the machine running Ferret. This can lead to remote code execution via cron jobs, SSH authorized_keys, shell profiles, or web shells. The vulnerability is fixed in Ferret version 2.0.0-alpha.4. Operators and users should assess exposure and prioritize [truncated]