{"id":"EM-20261111-B4DH","url":"https://cyber.eventmonitor.net/incident/EM-20261111-B4DH/pappl-retrofit-vulnerability-cve-2026-123747/","type":"cve","title":"pappl-retrofit Vulnerability (CVE-2026-123747)","subtitle":"CVE-2026-123747","subject":"CVE-2026-123747","status":"Developing","severity":"high","affected":[],"headline":null,"born":"2026-11-11T19:17:30.467Z","firstSignal":"2026-11-11T11:11:00.000Z","lastSignal":"2026-11-11T19:17:30.467Z","updated":"2026-11-12T00:31:06.720Z","revision":1,"life":[{"status":"Born","at":"2026-11-11T19:17:30.467Z","why":"second independent source: C6 NVD CVE API 2.0"},{"status":"Developing","at":"2026-11-11T19:17:30.467Z","why":"signals keep joining"}],"changeLog":[{"at":"2026-11-11T11:11:00.000Z","what":"First signal: C41 Red Hat Security Data"},{"at":"2026-11-11T19:17:30.467Z","what":"Born: second source, C6 NVD CVE API 2.0. Page EM-20261111-B4DH created."}],"stages":[{"name":"Disclosed","at":"2026-11-11T19:17:30.467Z","detail":"C6 NVD published"},{"name":"Scored","at":"2026-11-11T19:17:30.467Z","detail":"CVSS 7.3"},{"name":"Exploited","at":null,"detail":"No exploitation reported"},{"name":"Advisories","at":null,"detail":"None yet"},{"name":"Vendor Response","at":"2026-11-11T11:11:00.000Z","detail":"C41 published"},{"name":"Resolved","at":null,"detail":"After 14 quiet days"}],"signals":[{"at":"2026-11-11T11:11:00.000Z","source":"C41","sourceName":"Red Hat Security Data","role":"Vendor","severity":3,"title":"Red Hat: CVE-2026-123747 (important)","text":"pappl-retrofit: Directory traversal in the add-ppdfiles and delete-ppdfiles actions","url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2026-123747.json"},{"at":"2026-11-11T19:17:30.467Z","source":"C6","sourceName":"NVD CVE API 2.0","role":"Database","severity":3,"title":"CVE-2026-123747 (CVSS 7.3)","text":"A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description (PPD) files. A remote, unauthenticated attacker can exploit this directory traversal flaw by submitting filenames containing path traversal sequences. This allows the attacker to upload or delete arbitrary files on the system, which can result in data corruption, denial of service, or arbitrary command execution.","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-123747"}],"crowd":[],"reference":{"nvd":{"published":"2026-11-11T19:17:30.467","score":7.3,"severity":"HIGH","desc":"A flaw was found in pappl-retrofit. The application fails to properly sanitize user-supplied filenames when handling the upload and deletion of PostScript Printer Description (PPD) files. A remote, unauthenticated attacker can exploit this directory traversal flaw by submitting filenames…","product":"","seen":1794435185345},"kev":null,"epss":null,"p0":false},"mergedInto":null,"publisher":"Event Monitor Cyber"}