CVE-2026-102783 | | | 2026-10-08 | Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0 - Gridbox contains the same prefix-only containment logic in its site Uploa… |
CVE-2026-107466 | Medium | 6.1 | 2026-10-08 | A flaw was found in flatpak-builder. This vulnerability allows an attacker to cause information disclosure by convincing a user or continuous integration (CI)… |
CVE-2026-85490 | | | 2026-10-08 | When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal s… |
CVE-2026-85487 | | | 2026-10-08 | A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0. An unauthenticated attacker on the local network cou… |
CVE-2026-86828 | Medium | 6.6 | 2026-10-08 | The BackWPup WordPress plugin before 5.7.7 does not properly restrict the destination path of files extracted during a backup restore when its fallback archiv… |
CVE-2026-5049 | | | 2026-10-08 | A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uplo… |
CVE-2026-94580 | | | 2026-10-08 | An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS version… |
CVE-2026-105820 | Medium | 5.4 | 2026-10-07 | Vault's ACL policy cache allowed namespace traversal when policy names contained path traversal constructs. This may allow a token assigned specially crafted p… |
CVE-2026-105816 | High | 8.0 | 2026-10-07 | Vault and Vault Enterprise did not consistently verify that stored plugin catalog entries reference binaries within the configured plugin directory. When Vault… |
CVE-2026-106557 | High | 7.7 | 2026-10-07 | Backstage is an open framework for building developer portals. Prior to 1.14.6 and 1.15.4, the @backstage/plugin-techdocs-node package did not sufficiently val… |
CVE-2026-101886 | Medium | 4.0 | 2026-10-07 | Cisco Jabber for Android (com.cisco.im) before 15.3.1.311364 contains a path traversal vulnerability that allows a malicious app with no permissions to write a… |
CVE-2026-106560 | High | 7.1 | 2026-10-07 | Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package… |
CVE-2026-106559 | Medium | 6.3 | 2026-10-07 | Backstage is an open framework for building developer portals. Prior to 0.3.25, the @backstage/plugin-scaffolder-backend-module-confluence-to-markdown package… |
CVE-2026-102257 | High | 7.2 | 2026-10-07 | A Zip Slip vulnerability in the in the SMA1000 Appliance Management Console (AMC) interface allows an attacker to extract files outside the intended destinatio… |
CVE-2026-42532 | Medium | 5.5 | 2026-10-07 | A path traversal vulnerability exists in the EmailSheet extract_parts functionality of VisiData (version(s): dev (commit 38b21f78)). A specially crafted .eml f… |
CVE-2026-41958 | Medium | 6.5 | 2026-10-07 | A path traversal vulnerability exists in the unzip_http RemoteZipFile extract functionality of VisiData (version(s): dev (commit 38b21f78)). A specially crafte… |
CVE-2026-103435 | | | 2026-10-07 | Claude Code validated that a target file path resided within the project working directory at permission-check time, but re-resolved the path at write time wit… |
CVE-2026-58069 | | | 2026-10-07 | This vulnerability in Veeam Backup & Replication allows an authenticated Cloud Connect tenant to read arbitrary files on the service provider host. |
CVE-2026-103870 | Medium | 5.0 | 2026-10-07 | A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or up… |
CVE-2026-97671 | Medium | 6.5 | 2026-10-07 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability. |
CVE-2026-93448 | Medium | 6.5 | 2026-10-07 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a… |
CVE-2026-103360 | High | 8.1 | 2026-10-07 | IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a… |
CVE-2026-106508 | Medium | 5.3 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by potential file expos… |
CVE-2026-106496 | Low | 3.1 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by inconsistent enforc… |
CVE-2026-106494 | Medium | 4.4 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.17.8, the @backstage/backend-defaults package is affected by improper input validatio… |
CVE-2026-106493 | Low | 3.0 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 1.54.6, cloud storage catalog providers did not sufficiently validate object paths. A p… |
CVE-2026-106491 | Medium | 6.4 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input valid… |
CVE-2026-106490 | Medium | 6.5 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input val… |
CVE-2026-106489 | Medium | 6.5 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authoriza… |
CVE-2026-106486 | High | 8.5 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @ba… |
CVE-2026-79809 | High | 7.3 | 2026-10-06 | An unauthenticated path traversal vulnerability exists in an API endpoint of ClearPass Policy Manager. Successful exploitation of this vulnerability allows an… |
CVE-2026-79805 | Critical | 9.8 | 2026-10-06 | An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain fi… |
CVE-2026-79800 | High | 8.8 | 2026-10-06 | An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privi… |
CVE-2026-101155 | Critical | 9.1 | 2026-10-06 | An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially craft… |
CVE-2026-101154 | High | 7.2 | 2026-10-06 | An authenticated remote attacker with specific permissions can read or write files on the platform filesystem beyond the intended scope through specially craft… |
CVE-2026-101153 | High | 8.0 | 2026-10-06 | On affected versions of CloudVision Portal (on-premises) or CloudVision Sensor, a path traversal vulnerability exists. An authenticated user with sufficient hi… |
CVE-2026-86360 | Critical | 9.6 | 2026-10-06 | Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An una… |
CVE-2026-71168 | High | 7.3 | 2026-10-06 | Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A low… |
CVE-2026-106109 | | | 2026-10-06 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 1.0.0 until 3.3.0, @quasar/app-vite recursively removed the resolved… |
CVE-2026-106103 | High | 7.1 | 2026-10-06 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the icongenie generate --profile comman… |
CVE-2026-95140 | High | 7.5 | 2026-10-06 | kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, createFolder and existsFile endpoints acc… |
CVE-2026-105865 | High | 8.1 | 2026-10-06 | Payload is a free and open source headless content management system. In versions before 3.90.0 and canary versions before 4.0.0-canary.34, an authenticated us… |
CVE-2026-105795 | Low | 3.1 | 2026-10-06 | Kiota is an OpenAPI based HTTP Client code generator. From 1.25.1 until 1.35.0, Kiota copies x-ai-capabilities.response_semantics.oauth_card_path from an attac… |
CVE-2026-105840 | High | 7.5 | 2026-10-06 | lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files ou… |
CVE-2026-105834 | Medium | 6.5 | 2026-10-06 | Rundeck before 6.2.0 contains a path traversal vulnerability that allows users holding only the project configure ACL to read arbitrary server files by setting… |
CVE-2026-39792 | High | 8.6 | 2026-10-06 | Unauthenticated Arbitrary File Deletion in Simple File List <= 6.3.11 versions. |
CVE-2026-39754 | Medium | 6.5 | 2026-10-06 | Contributor Arbitrary File Download in Piotnet Addons For Elementor <= 7.1.71 versions. |
CVE-2026-39752 | High | 7.7 | 2026-10-06 | Contributor Arbitrary File Deletion in Jobs for WordPress <= 2.8.2 versions. |
CVE-2026-105751 | | | 2026-10-05 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.107.0 until 2.120.3, docl… |
CVE-2026-105744 | High | 7.5 | 2026-10-05 | Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.94.0 until 2.132.0, calle… |
CVE-2026-102262 | High | 7.3 | 2026-10-05 | Newell Brands DYMO ID 1.5.1.71 resolves its plugin Modules directory relative to the process working directory. An attacker could store a job file alongside ma… |
CVE-2026-95264 | Medium | 6.5 | 2026-10-05 | Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated backend user with article edit permission can delete arbitrary files writable by the PHP… |
CVE-2026-105677 | High | 7.2 | 2026-10-05 | Ghost is a Node.js content management system. From 6.10.3 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Adm… |
CVE-2026-105676 | Medium | 4.9 | 2026-10-05 | Ghost is a Node.js content management system. From 1.20.0 until 6.64.0, a vulnerability in how Ghost loads theme translation files allowed an authenticated Adm… |
CVE-2026-12171 | High | 7.8 | 2026-10-05 | auto-changelog before 2.6.1 merges configuration from inside the target repository (the .auto-changelog file and the auto-changelog key in package.json) into i… |
CVE-2026-88396 | High | 7.2 | 2026-10-05 | ApiAdmin v5.0 and before is vulnerable to Directory Traversal. The admin file-upload endpoint POST /admin/Index/upload in ApiAdmin takes the uploaded file's ex… |
CVE-2026-89039 | Medium | 6.5 | 2026-10-05 | A caller who can invoke the convert_playwright_script prompt in mcp-k6 can pass a bare file path as the playwright_script argument and receive the contents of… |
CVE-2026-88394 | High | 7.5 | 2026-10-05 | WookTeam v1.6.6 and before is vulnerable to a Directory Traversal. The project task export endpoint /api/project/task/export downloads an arbitrary file from t… |
CVE-2026-88392 | High | 7.5 | 2026-10-05 | Unimall v4 is vulnerable to Directory Traversal in FileUploadController.local(). This allows an attacker to execute arbitrary code. |
CVE-2026-63266 | | | 2026-10-05 | LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded… |
CVE-2026-105286 | Medium | 6.3 | 2026-10-05 | A vulnerability was detected in Totolink A3002MU 1.0.0-B20230403.1455. This impacts the function sub_44B250 of the file /boafrm/formUploadFile of the component… |
CVE-2026-104805 | | | 2026-10-05 | DigitalCanion has discovered a vulnerability in the backup restoration functionality that allows an attacker with access to the configured backup repository to… |
CVE-2026-105293 | High | 8.1 | 2026-10-05 | Legcord 1.1.0 through 1.3.0 contains a path traversal vulnerability in theme IPC handlers that allows script in the Discord page to escape the themes directory… |
CVE-2026-105174 | Medium | 5.4 | 2026-10-05 | A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the file gerapy/server/core/views.py of the co… |
CVE-2026-105157 | Medium | 4.3 | 2026-10-04 | A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocController.doGetTmp of the file /Doc/doGet… |
CVE-2026-105144 | Medium | 5.3 | 2026-10-04 | A flaw has been found in Drogon up to 1.9.13-1/10.0-beta.3 on Windows. Affected is the function StaticFileRouter::route of the file lib/src/StaticFileRouter.cc… |
CVE-2026-105125 | Low | 3.7 | 2026-10-04 | LaraDashboard before 1.4.8 contains a path traversal vulnerability that allows unauthenticated attackers to read JSON files by manipulating the {lang} route se… |
CVE-2026-104983 | Medium | 6.3 | 2026-10-03 | A vulnerability has been found in Linux Mint Xreader up to 4.6.9. Impacted is the function g_file_get_child of the file shell/ev-window.c of the component PDF… |
CVE-2026-104982 | Medium | 4.3 | 2026-10-03 | A flaw has been found in Linux Mint Xreader up to 4.6.5. This issue affects the function setup_document_content_list/g_strdup_printf of the file backend/epub/e… |
CVE-2026-87115 | Critical | 9.1 | 2026-10-03 | The VikAppointments Services Booking Calendar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ext… |
CVE-2026-94238 | Medium | 6.8 | 2026-10-03 | The Loco Translate WordPress plugin before 2.8.9 does not restrict which file paths its translation file routes will read, allowing users granted the Loco Tran… |
CVE-2026-85015 | Medium | 6.6 | 2026-10-03 | The Unlimited Elements for Elementor WordPress plugin before 2.0.21 does not sanitise file paths inside uploaded archives before extracting them, allowing auth… |
CVE-2026-103293 | Medium | 6.8 | 2026-10-03 | The MPG WordPress plugin before 4.2.3 does not validate that the dataset source supplied when importing a project is a remote URL before treating it as a loca… |
CVE-2026-104478 | High | 7.1 | 2026-10-03 | Formwork before 2.3.13 contains a path traversal vulnerability in BackupController that allows authenticated panel users to read or delete arbitrary files. Att… |
CVE-2026-104871 | | | 2026-10-02 | The Angular SSR is a server-rise rendering tool for Angular applications. Prior to versions 20.3.36, 21.2.23, and 22.1.7, the CommonEngine retrieveSSGPage prer… |
CVE-2014-125130 | High | 7.5 | 2026-10-02 | CodeArt Google MP3 Audio Player plugin (google-mp3-audio-player) for WordPress through 1.0.11 contains an unauthenticated arbitrary file read vulnerability tha… |
CVE-2026-104853 | | | 2026-10-02 | Nx is a monorepo solution for TypeScript and polyglot codebases. From 13.10.0 until 22.7.10 and 23.2.1, Nx migration planning reads the nx-migrations.migration… |
CVE-2026-51907 | High | 8.1 | 2026-10-02 | In TaskingAI v0.3.0 in the QR Code Generator plugin save_base64_image function, a path traversal vulnerability allows attackers to write image files to arbitra… |
CVE-2026-51906 | Critical | 9.1 | 2026-10-02 | In TaskingAI v0.3.0 in the DALL-E 3 image generation tool save_url_image function, a path traversal vulnerability allows attackers to write downloaded images t… |
CVE-2026-104843 | | | 2026-10-02 | uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way th… |
CVE-2026-103648 | Critical | 9.1 | 2026-10-02 | Path traversal in image-downloader 4.3.0 allows an attacker who can control the download URL to cause downloaded response data to be written outside the config… |
CVE-2026-104721 | | | 2026-10-02 | Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability. More specifically, an
MDC-ba… |
CVE-2026-104418 | High | 7.2 | 2026-10-02 | Ghost from 6.10.3 before 6.64.0 contains a remote code execution vulnerability that allows authenticated administrators to run code by abusing theme translatio… |
CVE-2026-104417 | Medium | 4.9 | 2026-10-02 | Ghost from 1.20.0 before 6.64.0 contains a path traversal vulnerability in theme translation file loading that allows authenticated administrators to read JSON… |
CVE-2025-71427 | Medium | 6.8 | 2026-10-01 | Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working director… |
CVE-2026-51888 | High | 7.5 | 2026-10-01 | langflow-ai langflow v1.8.4 is affected by: Directory Traversal. The impact is: Arbitrary file write outside the intended workspace or storage boundary.. The c… |
CVE-2026-51884 | Critical | 9.8 | 2026-10-01 | The /knowledge_base/upload_temp_docs temporary document upload endpoint in Langchain Chatchat 0.3.1 is vulnerable to path traversal. By crafting malicious file… |
CVE-2026-51883 | Critical | 9.1 | 2026-10-01 | The knowledge base creation and document upload interfaces in Langchain-Chatchat 0.3.0;0.3.1 is vulnerable to path traversal. An attacker can inject path trave… |
CVE-2026-51882 | Critical | 9.1 | 2026-10-01 | The OpenAI-compatible file upload endpoint `/v1/files` in Langchain-Chatchat 0.3.0 is vulnerable to path traversal. An attacker can write files to arbitrary lo… |
CVE-2026-51880 | Critical | 9.8 | 2026-10-01 | deeptutor 1.4.0 contains a path traversal issue in EditFileTool.execute. Through the live tutorbot WebSocket interface, a remote caller can induce the tool lay… |
CVE-2026-51875 | Critical | 9.1 | 2026-10-01 | In Devika v1.0, the Feature Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write files outside the intend… |
CVE-2026-51874 | High | 7.5 | 2026-10-01 | In Devika v1.0, the Patcher Agent save_code_to_project function contains a path traversal vulnerability that allows attackers to write files outside the intend… |
CVE-2026-51873 | High | 8.8 | 2026-10-01 | Devika v1.0 is vulnerable to Directory Traversal in the Coder.save_code_to_project function, which allows attackers to write files outside the intended project… |
CVE-2026-55393 | | | 2026-10-01 | Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote unauthenticated attac… |
CVE-2026-71426 | | | 2026-10-01 | GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated u… |
CVE-2026-104286 | Critical | 9.8 | 2026-10-01 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 thro… |
CVE-2026-55231 | High | 7.2 | 2026-10-01 | Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, a flawed central path sanitiz… |
CVE-2026-103884 | Medium | 6.5 | 2026-10-01 | A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly valid… |
CVE-2026-101889 | Medium | 6.5 | 2026-10-01 | The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated administrators to delete arbitrary director… |
CVE-2026-101888 | High | 7.2 | 2026-10-01 | The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary… |