Skip to content
OpenAdvisories

Vendor

Portabase

1 known vulnerabilities.

Products

portabase 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2026-67449

    Portabase: Unauthenticated path traversal in TUS webhook overwrites AES-256-GCM master key

    Portabase is a database backup and restore tool for PostgreSQL, MySQL, MsSQL, MariaDB, Firebird SQL, SQLite, MongoDB, Redis, Files and Docker Volume. Prior to version 1.21.2, a path traversal in the TUS upload webhook handler (app/api/tus/hooks/route.ts) allo…

    Portabase portabase