CVE-2026-100372Published
ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.php
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-100372 · Microsoft / collected KEV context
cve-program · CVE-2026-100372
- https://hackmd.io/@leediay/S1AIRjzqfx
- https://github.com/MacWarrior/clipbucket-v5/commit/f31de49b2194482ffef7147aa1e9b1c8f0f04eb7
- https://github.com/MacWarrior/clipbucket-v5/blob/61cce55ab26ef88fb782dfde47b44c17c56978cd/upload/admin_area/template_editor.php#L44-L69
- https://github.com/MacWarrior/clipbucket-v5/releases/tag/5.5.3-%23197
- https://github.com/MacWarrior/clipbucket-v5
- https://www.vulncheck.com/advisories/clipbucket-v5-before-5.5.3-197-path-traversal-via-template-editor-php
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.