CVE-2022-26884

Users can read any files by log server, Apache DolphinScheduler users should upgrade to version 2.0.6 or higher.

• CWE-22
• CWE-22

• https://www.openwall.com/lists/oss-security/2022/10/28/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread/xfdst5y4hnrm2ntmc5jzrgmw2htyyb9cMailing List, Vendor Advisory
• https://www.openwall.com/lists/oss-security/2022/10/28/2Mailing List, Third Party Advisory
• https://lists.apache.org/thread/xfdst5y4hnrm2ntmc5jzrgmw2htyyb9cMailing List, Vendor Advisory

Published

Oct 28, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26872AMI Megarac Password reset interception via API8.8
• CVE-2022-26873A potential attacker can execute an arbitrary code at the ti…8.2
• CVE-2022-26874lib/Horde/Mime/Viewer/Ooo.php in Horde Mime_Viewer before 2.…5.4
• CVE-2022-26877Asana Desktop before 1.6.0 allows remote attackers to exfilt…6.5
• CVE-2022-26878drivers/bluetooth/virtio_bt.c in the Linux kernel before 5.1…5.5
• CVE-2022-2688A vulnerability was found in SourceCodester Expense Manageme…9.8
• CVE-2022-26885When using tasks to read config files, there is a risk of da…7.5
• CVE-2022-26887Delta Electronics DIAEnergie (All versions prior to 1.8.02.0…9.8
• CVE-2022-26888Cross-site scripting in the Intel(R) Quartus Prime Pro and S…4.1
• CVE-2022-26889In Splunk Enterprise versions before 8.1.2, the uri path to …8.8
• CVE-2022-2689A vulnerability classified as problematic has been found in …5.4
• CVE-2022-26890On F5 BIG-IP Advanced WAF, ASM, and APM 16.1.x versions prio…7.5