Skip to content
Threat Feed
Subscribe

Vendor

Gitroom

1 brief RSS
critical advisory

Critical Path Traversal in Postiz Exploited for Instance Takeover

An unauthenticated path traversal vulnerability (CVE-2026-19264) in Postiz enables remote attackers to read sensitive configuration files, facilitate JWT secret theft, and achieve full instance takeover through forged administrative sessions.

Postiz path-traversal instance-takeover cve-2026-19264
1r 2t 1c