Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Ghidra before 12.0.4 contains a path traversal vulnerability in the theme import functionality that allows attackers to write files outside the intended theme directory. Attackers can craft malicious theme ZIP files with traversal sequences in filenames to execute arbitrary code or modify sensitive files like .bashrc or .ssh/authorized_keys.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-52755 Path Traversal Vulnerability in Ghidra Theme Import Before 12.0.4 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-52755
Post summary
This brief notice announces a path traversal vulnerability in Ghidra Theme Import versions prior to 12.0.4, without providing PoC, exploit details, or remediation information.
CVE-2026-52755 Ghidra before 12.0.4 contains a path traversal vulnerability in the theme import functionality that allows attackers to write files outside the intended theme directo… https://www.cve.org/CVERecord?id=CVE-2026-52755
Post summary
The announcement describes a path traversal flaw in Ghidra version prior to 12.0.4 that permits writing files outside the theme directory, with no PoC, exploit, or patch information provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | nsa | ghidra | - | - | - |