CVE WATCH / VULNERABILITY DETAIL
CVE-2026-54630
CRITICALCVSS 9.6NVD feed
Published 23 October 2026 · tracked since 23 October 2026
Description
Part-DB is an open source inventory management system for electronic components. Prior to version 2.12.1, the part attachment upload handler stores uploaded files under the web-served media directory using the client-supplied file extension, and its extension blocklist does not include phar. Attachm
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-54631 MEDIUM 6.3
- CVE-2026-19678
- CVE-2026-115536 MEDIUM 4.3
- CVE-2026-115537 MEDIUM 4.3
- CVE-2026-115535 LOW 2.4
- CVE-2026-115534 MEDIUM 4.3
- CVE-2026-114625
- CVE-2026-83938 CRITICAL 10
- CVE-2026-114620 MEDIUM 5.4
- CVE-2026-114615 HIGH 7.4