CVE-2026-109118 | Medium | 4.6 | 2026-10-16 | Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the browse, restore, history and delete operations to resolve t… |
CVE-2026-93767 | Medium | 6.5 | 2026-10-16 | The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 'guid' parameter parameter. This mak… |
CVE-2026-103896 | High | 7.5 | 2026-10-16 | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to a limited file write via path traversal in v… |
CVE-2026-109221 | High | 8.1 | 2026-10-16 | The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validat… |
CVE-2026-104769 | Medium | 5.9 | 2026-10-16 | The Debloat – Remove Unused CSS, Optimize JS plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via the 's'… |
CVE-2026-84823 | High | 7.1 | 2026-10-16 | A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBAC) role, can exploit a path traversal v… |
CVE-2026-108452 | High | 8.8 | 2026-10-15 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code ove… |
CVE-2026-105032 | Critical | 9.1 | 2026-10-15 | The EnergizeLab Eilik and EilikO AI skill upload endpoint, served by the FastAPI AI inference and profiling services, does not require authentication and does… |
CVE-2026-57496 | Critical | 9.6 | 2026-10-15 | NetLicensing MCP Server is a natural-language interface that enables agentic applications to manage the software-licensing lifecycle in Labs64 NetLicensing. Pr… |
CVE-2026-111170 | Medium | 6.5 | 2026-10-15 | kedro-datasets from 9.3.0 through 9.6.0 contains a path traversal vulnerability in MatplotlibDataset.save() that allows attackers to write files outside the da… |
CVE-2026-61702 | Medium | 5.3 | 2026-10-15 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copy_banner() in scheduler/ipp.c uses the… |
CVE-2026-85634 | High | 8.8 | 2026-10-15 | A flaw was found in the ContentRepositoryImpl.copyExplodedContent function of the wildfly-core library, which is used by WildFly and JBoss EAP to manage server… |
CVE-2026-78851 | Medium | 6.5 | 2026-10-15 | Directory Traversal vulnerability in Grav CMS 2.0.3 through 2.0.6 allows a remote attacker to obtain sensitive information via the GravExtension.php and the me… |
CVE-2026-62679 | | | 2026-10-15 | Lychee is a free, open-source photo-management tool. Prior to 7.6.4, SecurePathController, which serves GET /image/{path}, concatenates the attacker-controlled… |
CVE-2026-58393 | Medium | 5.9 | 2026-10-15 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the OpenVPN Client Specific Override common_name field accepts path traver… |
CVE-2026-57155 | Critical | 9.9 | 2026-10-15 | OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.11, the Firewall Alias GeoIP importer's process_zip() and process_gzip() paths… |
CVE-2026-63130 | Medium | 5.5 | 2026-10-15 | EspoCRM is an open source customer relationship management application. Prior to 9.3.10, an authenticated administrator can provide crafted input to the admini… |
CVE-2026-110746 | High | 7.8 | 2026-10-15 | A local privilege escalation vulnerability in TotalAV allows an unprivileged local user to forge the gRPC IPC authentication token, through loading IPC.dll and… |
CVE-2026-104025 | | | 2026-10-15 | Path Traversal (CWE-22) in the execute_obj function of the archive object viewer (peach.pas) in PeaZip 11.2.0 and earlier on Windows allows an attacker who con… |
CVE-2026-50619 | | | 2026-10-15 | A path traversal vulnerability has been reported to affect Qsirch. If exploited, the vulnerability could allow remote attackers to read the contents of unexpec… |
CVE-2026-34015 | | | 2026-10-15 | A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to… |
CVE-2026-26243 | | | 2026-10-15 | A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to… |
CVE-2026-41544 | | | 2026-10-15 | A path traversal vulnerability has been reported to affect QcalAgent. If a remote attacker gains a user account, they can then exploit the vulnerability to rea… |
CVE-2026-24718 | | | 2026-10-15 | A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to… |
CVE-2025-66275 | | | 2026-10-15 | A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to… |
CVE-2025-66272 | | | 2026-10-15 | A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to… |
CVE-2026-110923 | Medium | 6.5 | 2026-10-15 | A flaw was found in OpenSSH. During an sftp copy, a malicious server can supply an empty name, a slash-only path, or a ".." basename that sftp uses as the loca… |
CVE-2026-62664 | Medium | 5.4 | 2026-10-14 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.19.0, FileRise validates the complete folder… |
CVE-2026-104107 | Medium | 6.5 | 2026-10-14 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. In FileRise 3.22.0, the /api/file/saveFile.php operatio… |
CVE-2026-0312 | | | 2026-10-14 | Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the… |
CVE-2026-110766 | Medium | 4.3 | 2026-10-14 | Colanode server through 0.4.7 contains a path traversal vulnerability that allows authenticated users to read arbitrary .jpeg files by supplying an encoded tra… |
CVE-2026-110666 | Medium | 6.5 | 2026-10-14 | A vulnerability was identified in cemtan sar2html 4.0.0. Affected is the function updateDb of the file sar2html.py of the component File Upload. The manipulati… |
CVE-2026-100406 | | | 2026-10-14 | dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. From 2.0.0-alpha.0… |
CVE-2026-104103 | High | 8.1 | 2026-10-14 | Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models. Prior to 0.17.8, ludwig.datasets.archives.extract_archive() vali… |
CVE-2026-92153 | High | 7.1 | 2026-10-14 | F´ (F Prime) is a framework that enables development and deployment of spaceflight and other embedded software applications. Prior to 4.3.0, Svc::FileUplink ha… |
CVE-2026-110717 | Medium | 5.3 | 2026-10-14 | Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outsid… |
CVE-2026-110657 | Low | 3.3 | 2026-10-14 | Khronos NNEF-Tools nnef through 1.0.10 and nnef-tools through 1.0.11 contain a path traversal vulnerability that allows attackers to write files outside the mo… |
CVE-2026-59774 | Critical | 9.8 | 2026-10-14 | Gitea's Org-mode markup renderer processes INCLUDE directives supplied to the repository markup endpoint without preventing access to server-side files. An una… |
CVE-2026-101217 | Medium | 6.5 | 2026-10-14 | Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilit… |
CVE-2026-107508 | High | 8.6 | 2026-10-14 | The Ultimate Multisite WordPress plugin before 2.17.2 does not validate a user-supplied value used to select a file to include, allowing unauthenticated attac… |
CVE-2026-110458 | Low | 3.7 | 2026-10-14 | A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to create… |
CVE-2026-110457 | Low | 3.7 | 2026-10-14 | A malicious actor with access to the network and under certain conditions could exploit a Path Traversal vulnerability found in UniFi Protect AI Key to obtain… |
CVE-2026-53564 | | | 2026-10-13 | Vulnerability in Citrix UniconOS leading to Arbitrary file read and write
This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2. |
CVE-2026-103820 | Medium | 5.5 | 2026-10-13 | CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an a… |
CVE-2026-90530 | Critical | 9.3 | 2026-10-13 | ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file… |
CVE-2026-79715 | Medium | 5.5 | 2026-10-13 | IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system. An attacker could use… |
CVE-2026-63162 | High | 8.8 | 2026-10-13 | Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary di… |
CVE-2026-106634 | High | 7.7 | 2026-10-13 | Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in ar… |
CVE-2026-102238 | Critical | 9.6 | 2026-10-13 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an unauthorized attacker to execute code over a net… |
CVE-2026-85932 | Medium | 6.5 | 2026-10-13 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose informa… |
CVE-2026-70298 | Medium | 6.5 | 2026-10-13 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to disclose informa… |
CVE-2026-70161 | High | 7.3 | 2026-10-13 | Improper limitation of a pathname to a restricted directory ('path traversal') in .NET allows an authorized attacker to elevate privileges locally. |
CVE-2026-70084 | Medium | 5.5 | 2026-10-13 | Improper access control in Windows Projected File System allows an authorized attacker to disclose information locally. |
CVE-2026-69973 | Medium | 6.5 | 2026-10-13 | Improper limitation of a pathname to a restricted directory ('path traversal') in Windows Libarchive allows an unauthorized attacker to perform tampering over… |
CVE-2026-69943 | High | 8.8 | 2026-10-13 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code ove… |
CVE-2026-110235 | Medium | 5.5 | 2026-10-13 | MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extraction folder by bypassing the non-recurs… |
CVE-2026-110232 | Low | 3.3 | 2026-10-13 | Fossify File Manager through 1.6.2 contains a path traversal vulnerability that allows crafted ZIP archives to write files outside the extraction folder by byp… |
CVE-2026-110231 | Medium | 4.7 | 2026-10-13 | muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outside the destination folder by bypassing… |
CVE-2026-110212 | Medium | 4.3 | 2026-10-13 | Stonewuu ai-fusion-video through 1.2.0 contains a path traversal vulnerability that allows authenticated users to write uploaded files outside the media direct… |
CVE-2026-105727 | High | 8.8 | 2026-10-13 | Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges… |
CVE-2026-102229 | Medium | 6.8 | 2026-10-13 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code allows an authorized attacker to disclose information over… |
CVE-2026-102226 | High | 8.8 | 2026-10-13 | Improper limitation of a pathname to a restricted directory ('path traversal') in Dynamics Business Central allows an authorized attacker to elevate privileges… |
CVE-2026-106173 | Critical | 9.8 | 2026-10-13 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauth… |
CVE-2026-78799 | Critical | 9.8 | 2026-10-13 | Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition… |
CVE-2026-110116 | Critical | 9.1 | 2026-10-13 | Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticat… |
CVE-2026-110115 | High | 7.5 | 2026-10-13 | Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream handler tha… |
CVE-2026-106047 | High | 7.7 | 2026-10-13 | A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read ar… |
CVE-2026-106034 | Medium | 5.0 | 2026-10-13 | A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the ho… |
CVE-2026-18228 | | | 2026-10-13 | HyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update Commvault ins… |
CVE-2026-106108 | | | 2026-10-13 | Quasar Framework is a framework for building high-performance Vue.js user interfaces. From 3.1.0 until 3.3.0, @quasar/app-vite SSG page definitions returned by… |
CVE-2026-93347 | Medium | 4.9 | 2026-10-13 | Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_list_file helper that allows malicious cluster workers to read arbitrary file… |
CVE-2026-74043 | Critical | 9.0 | 2026-10-13 | Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload_list_file, upload_rule_file, and upload_decoder_file that allows malicious clu… |
CVE-2026-74033 | Medium | 6.1 | 2026-10-13 | Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_lists() and delete_list_file() CDB list handlers that allows compromised clus… |
CVE-2026-74031 | Medium | 6.5 | 2026-10-13 | Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the delete_rule_file and delete_decoder_file helpers that allows malicious cluster wo… |
CVE-2026-109956 | High | 7.0 | 2026-10-13 | NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated… |
CVE-2026-109519 | High | 8.3 | 2026-10-13 | A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template R… |
CVE-2026-65164 | High | 8.1 | 2026-10-13 | NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limita… |
CVE-2026-65161 | High | 7.5 | 2026-10-13 | NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process b… |
CVE-2026-65103 | High | 8.1 | 2026-10-13 | NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause… |
CVE-2026-109156 | Medium | 6.3 | 2026-10-13 | A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function _extract_env of the file mlserver/env.py of the component environment… |
CVE-2026-109155 | Medium | 6.3 | 2026-10-13 | A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler. This manipulation causes path travers… |
CVE-2026-109153 | Medium | 6.3 | 2026-10-13 | A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py of the co… |
CVE-2026-85114 | High | 7.5 | 2026-10-13 | A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validat… |
CVE-2026-109152 | Medium | 5.4 | 2026-10-13 | A security vulnerability has been detected in jbardin scp.py up to 0.16.1. The impacted element is the function _recv_file/_recv_pushd of the component SCP Rec… |
CVE-2026-109106 | Medium | 4.4 | 2026-10-13 | A security flaw has been discovered in Polaris Office App 9.9.19 on Android. Affected by this vulnerability is the function com.infraware.service.m.n.a of the… |
CVE-2026-108940 | Medium | 6.5 | 2026-10-13 | A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibration_apply of the file mistralrs-server-core/src/… |
CVE-2026-82110 | Critical | 9.6 | 2026-10-12 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during… |
CVE-2026-82101 | Critical | 9.6 | 2026-10-12 | IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability. |
CVE-2026-75061 | High | 7.5 | 2026-10-12 | IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request… |
CVE-2026-19627 | High | 8.2 | 2026-10-12 | IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to read arbitrary host files and overwrite certain application files due to improper validati… |
CVE-2026-109595 | Medium | 5.5 | 2026-10-12 | Hugo from v0.84.0 before v0.167.0 contains a path traversal vulnerability that allows malicious themes or modules to read files outside the project root via ES… |
CVE-2026-109574 | Medium | 5.5 | 2026-10-12 | Hugo before v0.167.0 contains a path traversal vulnerability in css.Sass that allows malicious themes or modules to read files outside the project root through… |
CVE-2026-102627 | High | 8.8 | 2026-10-12 | IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of file p… |
CVE-2026-84320 | Medium | 6.3 | 2026-10-12 | Nginx UI is a web user interface for the Nginx web server. Prior to 2.4.3, Nginx UI validates an automatic backup's storage_path, but AutoBackup.GetName return… |
CVE-2026-105052 | High | 7.5 | 2026-10-12 | IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specia… |
CVE-2021-48011 | High | 7.5 | 2026-10-12 | Servor 1.0.0 through 4.0.2 contains a path traversal vulnerability that allows unauthenticated remote attackers to escape the served root by sending URL-encode… |
CVE-2026-59976 | High | 8.1 | 2026-10-12 | ConvertX is a self-hosted file conversion service. Prior to 0.18.0, the ImageMagick converter uses the unsanitized convert_to parameter to construct an output… |
CVE-2026-104102 | | | 2026-10-12 | copyparty is a portable file server. Prior to 1.20.19, FTP upload path handling does not confine destinations to configured copyparty volumes. When FTP or FTPS… |
CVE-2026-103061 | | | 2026-10-12 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in gleam-lang gleam allows a malicious package publisher to delete… |
CVE-2026-85964 | High | 7.7 | 2026-10-12 | Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 allow an authenticated Query Console user to supply unsafe path values to… |