Skip to content
Threat Feed
Subscribe

Tag

Cve-2026-106486

1 brief RSS
high advisory

Path Traversal Vulnerability in Backstage Bitbucket Scaffolder Modules

Authenticated users can exploit improper filesystem validation in Backstage Bitbucket scaffolder plugins to achieve unauthorized file access, modification, or deletion outside the intended working directory via CVE-2026-106486.

plugin-scaffolder-backend-module-bitbucket-cloud +1 path-traversal backstage vulnerability cve-2026-106486
1t 1c