CVE-2026-24741
Published Jan 27, 2026ConvertXis a self-hosted online file converter. In versions prior to 0.17.0, the `POST /delete` endpoint uses a user-controlled `filename` value to construct a filesystem path and…
- evidence mentions
- 2
- Buzz score
- 16.0