rickknowles CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH rickknowles CVE published 2026-06-25

CVE-2026-56122

CVE-2026-56122 is a high-severity path traversal vulnerability in Winstone Servlet Engine through version 0.9.10. This vulnerability allows unauthenticated attackers to read arbitrary files by sending HTTP GET requests with dot-dot-slash sequences. The vulnerability is considered high severity with a CVSS score of 8.7. Defenders responsible for Winstone Servlet Engine installations, especially those runni [truncated]