CVE-2026-42532

A path traversal vulnerability exists in the EmailSheet extract_parts functionality of VisiData (version(s): dev (commit 38b21f78)). A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability.

• CWE-22

• https://talosintelligence.com/vulnerability_reports/TALOS-2026-2415

Published

Oct 7, 2026

Last Modified

Oct 7, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-42525Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.…4.3
• CVE-2026-42526In the AWS Secrets Manager and SSM Parameter Store secrets b…5.3
• CVE-2026-42527Deserialization of Untrusted Data vulnerability in Apache Ca…8.1
• CVE-2026-42528A memory calculation bug in mod_dav in Apache httpd 2.4.67 a…4.3
• CVE-2026-4253A security flaw has been discovered in Tenda AC8 16.03.50.11…7.2
• CVE-2026-42530NGINX Open Source has a vulnerability in the ngx_http_v3_mod…8.1
• CVE-2026-42533A vulnerability exists in NGINX Plus and NGINX Open Source w…8.1
• CVE-2026-42534NLnet Labs Unbound up to and including version 1.25.0 has a …5.3
• CVE-2026-42535A path handling issue in mod_dav_fs in Apache 2.4.67 and ear…9.1
• CVE-2026-42536Heap-based Buffer Overflow vulnerability in Apache HTTP Serv…7.5
• CVE-2026-42537Remote Code Execution via JDBC URL Injection in Apache Range…9.8
• CVE-2026-42538IRIS is a web collaborative platform that helps incident res…6.3