Signal is active with 4 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any writeable path via a crafted POST request.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-04-30 | 2 | Disclosure2 |
| 2026-05-12 | 4 | Disclosure2General2 |
CVE-2026-36767 A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any writeable path via a crafted POST … https://www.cve.org/CVERecord?id=CVE-2026-36767
Post summary
The text discloses a path traversal flaw in shopizer v3.2.5 that permits arbitrary file writes via crafted POST requests, but it provides no PoC, exploit code, or patch information.
References CVE: CVE-2026-36767 CVSS: 10 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
This brief advisory announces CVE-2026-36767 with a critical severity and provides its CVSS vector, but offers no PoC, exploit, or mitigation details.
CVE: CVE-2026-36767 CVSS: 10 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any writeable…
Post summary
The post publishes details of a critical path traversal vulnerability in shopizer v3.2.5, including CVSS metrics and a vulnerability description, but offers no PoC, exploit code, or patch information.
CRITICAL: CVE-2026-36767 (CVSS 10) — multiple products. CVE: CVE-2026-36767 CVSS: 10 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The post announces a critical CVE with CVSS 10 and describes its severity, but it does not provide any PoC, exploit, patch, or evidence of exploitation.
https://lyrie.ai/research/research/cve-2026-36767-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The tweet merely links to an advisory for CVE‑2026‑36767 without providing any additional details on exploitation, patches, or technical specifics.
🚨*CVE* CVE-2026-36767 A path traversal vulnerability in the /content/images/add endpoint of shopizer v3.2.5 allows attackers write arbitrary files to any writeable path via a crafted POST … https://www.cve.org/CVERecord?id=CVE-2026-36767 ----- Traducción: CVE-2026-36767 Una… http://infoflow.cloud`
Post summary
CVE‑2026‑36767 is a path traversal flaw in shopizer v3.2.5 that permits attackers to write arbitrary files via crafted POST requests, yet no PoC, exploit tool, active exploitation, or patch is mentioned.