CVE-2026-102598: Werkzeug safe_join() allows Windows special device names

Overview

Severity

N/A

Exploit Status

Not Exploited

Patch Tuesday

2026-Sep

Released

2026-10-03

EPSS Score

0.37% (percentile: 28.4%)

Affected Products (2)

Other

• 19693-17084
• 21021-17084

Revision History

• 2026-10-03: Information published.