Robuta

https://advisories.gitlab.com/golang/github.com/lf-edge/ekuiper/v2/GHSA-fv2p-qj5p-wqq4/ LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement | GitLab Advisory... GHSA-fv2p-qj5p-wqq4 LF Edge eKuiper vulnerable to File Path Traversal leading to file replacement: Path traversal is also known as directory traversal. These... file pathedgevulnerabletraversalleading https://www.miggo.io/vulnerability-database/cve/CVE-2026-101067 CVE-2026-101067: dbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversal | Miggo A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1. This affects the function saveUploadedFile of the file files.js of the component... path traversalcvesaveuploadedfile https://www.sentinelone.com/vulnerability-database/cve-2025-10233/ CVE-2025-10233: Kodcloud Kodbox Path Traversal Vulnerability Jun 17, 2026 - CVE-2025-10233 is a path traversal vulnerability in Kodcloud Kodbox 1.61. Learn about its impact, affected versions, and mitigation methods. path traversal vulnerabilitycve https://www.sentinelone.com/vulnerability-database/cve-2021-46830/ CVE-2021-46830: GoAnywhere MFT Path Traversal Vulnerability Nov 21, 2024 - CVE-2021-46830 is a path traversal vulnerability in GoAnywhere MFT. Learn about its impact, affected versions, and mitigation methods. path traversal vulnerabilitycvemft https://cve-explore.com/cve/CVE-2021-41773 Path Traversal in Apache HTTP Server — CVE-2021-41773 | CVE Explore A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. Affects Apache HTTP Server. Severity: Critical (CVSS 9.8). Disclosed… apache http serverpath traversalcveexplore https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/ci-with-toad-edge/CVE-2022-28148/ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | GitLab Advisory... CVE-2022-28148 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'): The file browser in Jenkins Continuous Integration with Toad... of adirectory pathimproperlimitationpathname https://www.sentinelone.com/vulnerability-database/cve-2026-90930/ CVE-2026-90930: File Browser Path Traversal Vulnerability Sep 14, 2026 - CVE-2026-90930 is a path traversal vulnerability in File Browser. Learn about its impact, affected versions, and mitigation methods. path traversal vulnerabilityfile browsercve https://advisories.gitlab.com/pypi/ait-core/CVE-2026-47731/ NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered... CVE-2026-47731 NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated... path traversalresulting incan benasaammos https://cyberthreatintelligence.net/cve/CVE-2025-34028 CVE-2025-34028 — Commvault Command Center Path Traversal Vulnerability | Cyber Threat Intelligence Oct 15, 2026 - CVE-2025-34028 — Commvault Command Center Path Traversal Vulnerability. Affects Commvault Command Center. Rated CRITICAL (CVSS 10). Listed in the CISA Known... path traversal vulnerabilitycyber threat intelligencecommand centercvecommvault https://advisories.gitlab.com/pypi/gradio/CVE-2026-49119/ Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks |... CVE-2026-49119 Gradio FileExplorer preprocess path traversal allows files outside root_dir to reach callbacks: Gradio before 6.16.0 contain a path traversal... path traversalgradiopreprocessallowsfiles https://www.sentinelone.com/vulnerability-database/cve-2026-28769/ CVE-2026-28769: IDC SFX SuperFlex Path Traversal Flaw Mar 5, 2026 - CVE-2026-28769 is a path traversal vulnerability in IDC SFX SuperFlex Satellite Receiver. Learn about its impact, affected versions, and mitigation methods. path traversalcveidcsfxsuperflex https://wasteland.me/intel/CVE-2026-85684 CVE-2026-85684: Unauthenticated Path Traversal in marker Lets Attackers Write or Delete Any File —... A critical path traversal flaw in the marker document-conversion server (through version 2.0.0) allows unauthenticated attackers to write arbitrary files... path traversalcveunauthenticatedmarkerlets https://advisories.gitlab.com/pypi/mlflow/CVE-2023-6977/ Path Traversal: '\..\filename' | GitLab Advisory Database (GLAD) CVE-2023-6977 Path Traversal: '\..\filename': This vulnerability enables malicious users to read sensitive files on the server. path traversalfilenamegitlabadvisorydatabase https://codeant.ai/vulnerability-database/cve-2026-18427 Path Traversal (CWE-22) in @fastify/static Route Handler @fastify/static before version 10.1.3 contains an incomplete fix for a previous route guard bypass. The static file handler rejected only parent directory... path traversalstatic routecwefastifyhandler https://o3.security/vulnerability/CVE-2026-66384 CVE-2026-66384: Artifactory Path Traversal (KEV) Aug 28, 2026 - CVE-2026-66384 is actively exploited in the wild (CISA KEV) — Medium 5.3 severity. It affects Artifactory. An authenticated user may write data outside the… path traversalcveartifactorykev https://www.invicti.com/web-application-vulnerabilities/jenkins-improper-limitation-of-a-pathname-to-a-restricted-directory-path-traversal-vulnerability-cve-2018-6356 Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')... Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs ... Jenkins... of adirectory pathjenkinsimproperlimitation https://broadside.deepfathom.ai/story/cisa-flags-rockwell-studio-5000-path-traversal-code-execution-flaws-x67if0 CISA flags Rockwell Studio 5000 path traversal, code execution flaws — The Broadside Jul 21, 2026 - The Cybersecurity and Infrastructure Security Agency published ICSA-26-202-10 for three Rockwell Automation Studio 5000 Logix Designer vulnerabilities:... path traversalcode executionthe broadsidecisaflags https://socprime.com/de/blog/cve-2025-20059-pingam-java-agent-vulnerability/ CVE-2025-20059: Relative Path Traversal-Schwachstelle im Ping Identity PingAM Java Policy Agent |... Aug 20, 2026 - Erkunden Sie die Analyse von CVE-2025-20059, einer kritischen Schwachstelle in Ping Identity PingAM Java Policy, mit den Details, die im SOC Prime Blog... relative pathping identitycvetraversalschwachstelle https://advisories.gitlab.com/swift/github.com/marmelroy/zip/CVE-2023-39135/ Path traversal in Zip Swift | GitLab Advisory Database (GLAD) CVE-2023-39135 Path traversal in Zip Swift: An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry. path traversalzipswiftgitlabadvisory https://www.cybersecurity-help.cz/vdb/vulns/83960/ Path traversal in Apache Struts - CVE-2023-50164 path traversalapache strutscve https://skyve.org/blog/2026/9/25/security-advisory-cve-2026-84939-apache-freemarker-path-traversal-vulnerability Security Advisory: CVE-2026-84939 – Apache FreeMarker Path Traversal Vulnerability path traversal vulnerabilitysecurity advisoryapache freemarkercve https://devhub.checkmarx.com/cve-details/cve-2022-1993/ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in gogs.io/gogs -... Jan 9, 2023 - Path Traversal in gogs/gogs prior to 0.12.9-rc.1. of adirectory pathimproperlimitationpathname https://db.fluidattacks.com/rul/SAST-PRVRF/ Typescript Path Traversal Vulnerability Express | Fluid Attacks Database Typescript: Detects path traversal vulnerabilities in Express.js applications where user-controlled input can be used to access files outside the… path traversal vulnerabilityfluid attackstypescriptexpressdatabase https://nflo.tech/knowledge-base/2026-04-21-cve-2026-40050-en/ CVE-2026-40050: Unauthenticated path traversal in CrowdStrike LogScale | nFlo Security Alert - CVE-2026-40050 (CrowdStrike LogScale). CVSS: 9.8 (critical). path traversalcveunauthenticatedcrowdstrikelogscale https://www.sentinelone.com/vulnerability-database/cve-2026-84365/ CVE-2026-84365: Hono Framework Path Traversal Vulnerability Sep 1, 2026 - CVE-2026-84365 is a path traversal vulnerability in Hono Web framework. Learn about its impact, affected versions, and mitigation methods. path traversal vulnerabilitycvehonoframework https://codeant.ai/vulnerability-database/cve-2026-73040 Path Traversal (CWE-22) in Dockge Stack Manager Backend CVE-2026-73040 in Dockge enables authenticated path traversal, exposing Compose secrets and deleting directories outside the managed stacks directory. path traversalcwestackmanagerbackend https://codeant.ai/vulnerability-database/cve-2026-25539 Path Traversal File Write in SiYuan copyFile Allows An input validation flaw in SiYuan's /api/file/copyFile endpoint allows authenticated users to write files to arbitrary paths on the server filesystem. path traversalwrite infileallows https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2026-26064 2441262 – (CVE-2026-26064) CVE-2026-26064 calibre: Calibre: Remote Code Execution via Path Traversal remote code executionpath traversalcvecalibrevia https://advisories.gitlab.com/maven/net.sf.mpxj/mpxj/CVE-2026-65829/ MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers | GitLab... CVE-2026-65829 MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers: When reading a suitably crafted PRX or STX file, MPXJ... path traversal vulnerabilitypotentialprimaveraprxstx https://mobile-industrial-robots.com/zh/security-advisories/path-traversal Path Traversal Sep 29, 2025 - MiR robot software versions prior to version 3.0.0 are affected by a path traversal vulnerability. Authenticated users could abuse a vulnerable API endpoint to... path traversal https://managed-wp.com/blogs/mitigating-path-traversal-in-wordpress-customer-area-cve202642661-2026-05-03/ Mitigating Path Traversal in WordPress Customer Area | CVE202642661 | 2026-05-03 | Managed-WP.™ An authoritative breakdown of the critical path traversal flaw (CVE-2026-42661) impacting WP Customer Area plugin versions up to 8.3.4, including risk… path traversalcustomer areamitigatingwordpressmanaged https://vdb.ai.kr/vuln/PYSEC-2026-4108 PYSEC-2026-4108 — MPXJ: Potential Path Traversal Vulnerability in Primavera P3 P · VDB MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers path traversal vulnerabilitypotentialprimaveravdb https://www.sentinelone.com/vulnerability-database/cve-2026-40062/ CVE-2026-40062: Ziostation2 Path Traversal Vulnerability Apr 23, 2026 - CVE-2026-40062 is a path traversal vulnerability in Ziostation2. Learn about its impact, affected versions, and mitigation methods. path traversal vulnerabilitycve https://www.sentinelone.com/vulnerability-database/cve-2026-74859/ CVE-2026-74859: gnome-tweaks Path Traversal Vulnerability Sep 9, 2026 - CVE-2026-74859 is a path traversal vulnerability in gnome-tweaks shell theme installer. Learn about its impact, affected versions, and mitigation methods. path traversal vulnerabilitycvegnometweaks https://blog.cybersamir.com/path-traversal-explained/ Path Traversal Explained - Cyber Samir Jan 9, 2026 - Understanding and exploiting directory traversal vulnerabilities path traversalexplainedcybersamir https://advisories.gitlab.com/npm/coursevault-preview/CVE-2026-35613/ coursevault-preview has a path traversal due to improper base-directory boundary validation |... CVE-2026-35613 coursevault-preview has a path traversal due to improper base-directory boundary validation: coursevault-preview versions prior to 0.1.1 contain... has apath traversaldue topreviewimproper https://devhub.checkmarx.com/cve-details/cve-2008-7064/ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') - CVE-2008-7064 -... Directory traversal vulnerability in the get_lang function in global.php in Quicksilver Forums 1.4.2 and earlier, as used in QSF Portal before 1.4.5, when... of adirectory pathimproperlimitationpathname https://www.sentinelone.com/vulnerability-database/cve-2026-9138/ CVE-2026-9138: Langflow Path Traversal Vulnerability Sep 10, 2026 - CVE-2026-9138 is a path traversal vulnerability in Langflow 1.0.0-1.11.2. Learn about its impact, affected versions, and mitigation methods. path traversal vulnerabilitycve https://advisories.gitlab.com/npm/n8n-mcp/GHSA-8g7g-hmwm-6rv2/ n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposure |... GHSA-8g7g-hmwm-6rv2 n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposure: n8n-mcp versions before 2.50.1 contained three... path traversalmcpaffectedredirectfollowing https://www.sentinelone.com/vulnerability-database/cve-2026-85706/ CVE-2026-85706: GitLab Path Traversal Vulnerability Sep 14, 2026 - CVE-2026-85706 is a path traversal vulnerability in GitLab CE/EE. Learn about its impact, affected versions, and mitigation methods. path traversal vulnerabilitycvegitlab https://www.sentinelone.com/vulnerability-database/cve-2025-6795/ CVE-2025-6795: Marvell QConvergeConsole Path Traversal Jul 14, 2025 - CVE-2025-6795 is a path traversal vulnerability in Marvell QConvergeConsole. Learn about its impact, affected versions, and mitigation methods. path traversalcvemarvell https://cvepremium.circl.lu/cwe/CWE-27 CWE-27 - Path Traversal: 'dir/../../filename' Vulnerability-Lookup - Fast vulnerability lookup correlation from different sources. path traversalcwedirfilename https://0daynews.com/cve/cve-2024-57728/ CVE-2024-57728 — SimpleHelp Path Traversal Vulnerability — 0dayNews SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip… path traversal vulnerabilitycve https://www.sourcery.ai/vulnerabilities/python-flask-security-injection-path-traversal-open Flask Path Traversal via open() Function | Security Vulnerability Database | Sourcery The Flask application uses the open() function with user-controlled file paths without proper validation, enabling path traversal attacks. Attackers can... path traversalopen functionsecurity vulnerabilityflaskvia https://jvn.jp/en/jp/JVN20829034/index.html JVN#20829034: a-blog cms vulnerable to path traversal Japan Vulnerability Notes path traversaljvnblogcmsvulnerable https://www.plexicus.ai/cwe/cwe-27-path-traversal-dir-filename/ CWE-27: Path Traversal: 'dir/../../filename' — Plexicus This vulnerability occurs when an application builds file paths using user input but fails to properly block sequences like 'dir/../../filename'. Attackers… path traversalcwedirfilename https://codesignal.com/learn/courses/multidimensional-arrays-and-their-traversal-in-csharp/lessons/path-traversal-in-2d-arrays-using-csharp Path Traversal in 2D Arrays Using C# | CodeSignal Learn This lesson dives into the traversal of 2D arrays in C#, focusing on a specific pattern where movement is only allowed to adjacent cells with higher values.... path traversalarraysusingcodesignallearn https://advisories.gitlab.com/npm/vite/CVE-2026-39365/ Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling | GitLab Advisory Database... CVE-2026-39365 Vite Vulnerable to Path Traversal in Optimized Deps `.map` Handling: Any files ending with .map even out side the project can be returned to the... path traversalvitevulnerableoptimizeddeps https://www.prismor.dev/blog/jspdf-path-traversal-cve-2025-68428 Critical Path Traversal Vulnerability in jsPDF Library (CVE-2025-68428) | Prismor Security Blog Jan 6, 2026 - A critical local file inclusion vulnerability in jsPDF allows attackers to read arbitrary files from the server file system through unsanitized path parameters... path traversal vulnerabilitysecurity blogcriticallibrarycve https://codeant.ai/vulnerability-database/cve-2026-74884 Path Traversal (CWE-73) in openssl_encrypt Plugin Config CVE-2026-74884 is a high-severity path traversal flaw in openssl_encrypt that lets attackers access arbitrary directories by manipulating plugin IDs directly. path traversalcweopensslencryptplugin https://advisories.gitlab.com/gem/yard/CVE-2026-41493/ yard: Possible arbitrary path traversal and file access via yard server | GitLab Advisory Database... path traversalfile accessyardpossiblearbitrary https://www.sentinelone.com/vulnerability-database/cve-2025-69077/ CVE-2025-69077: Hobo Theme Path Traversal Vulnerability Jan 22, 2026 - CVE-2025-69077 is a path traversal vulnerability in AncoraThemes Hobo theme. Learn about its impact, affected versions, and mitigation methods. path traversal vulnerabilitycvehobotheme https://www.sentinelone.com/vulnerability-database/cve-2026-77269/ CVE-2026-77269: MCP Atlassian Path Traversal Vulnerability Sep 23, 2026 - CVE-2026-77269 is a path traversal vulnerability in MCP Atlassian server. Learn about its impact, affected versions, and mitigation methods. path traversal vulnerabilitycvemcpatlassian https://www.sentinelone.com/vulnerability-database/cve-2026-15095/ CVE-2026-15095: WooCommerce CTX Feed Path Traversal Flaw Sep 22, 2026 - CVE-2026-15095 is a path traversal vulnerability in WooCommerce CTX Feed plugin. Learn about its impact, affected versions, and mitigation methods. path traversalcvewoocommercectxfeed https://hackhalt.com/threat/cve-2025-28945-allows-php-local-file-inclusion/ valen allows PHP Local File Inclusion - Path Traversal (CVE-2025-28945) Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in snstheme Valen - Sport, Fashion… local file inclusionpath traversalvalenallowsphp https://advisories.gitlab.com/composer/froxlor/froxlor/CVE-2026-41228/ Froxlor has Local File Inclusion via path traversal in API `def_language` parameter leads to Remote... CVE-2026-41228 Froxlor has Local File Inclusion via path traversal in API `def_language` parameter leads to Remote Code Execution: The Froxlor API endpoint... local file inclusionpath traversallanguage parameterleads tofroxlor https://www.sentinelone.com/vulnerability-database/cve-2020-3187/ CVE-2020-3187: Cisco Firepower Path Traversal Flaw Nov 21, 2024 - CVE-2020-3187 is a path traversal vulnerability in Cisco Firepower Threat Defense. Learn about its impact, affected versions, and mitigation methods. cisco firepowerpath traversalcveflaw https://infiltr8.io/redbook/web-pentesting/web-vulnerabilities/server-side/file-inclusion/ File Inclusion & Path Traversal | The Red-Book the red bookpath traversalfileinclusion https://advisories.gitlab.com/golang/github.com/go-git/go-git/v4/CVE-2023-49569/ Relative Path Traversal | GitLab Advisory Database (GLAD) CVE-2023-49569 Relative Path Traversal: Relative Path Traversal in github.com/go-git/go-git/v4. relative pathtraversalgitlabadvisorydatabase https://www.ionix.io/threat-center/cve-2026-79707/ CVE-2026-79707 – Unauthenticated Arbitrary File Read (Path Traversal) – Google Agent Development... Sep 9, 2026 - CVE-2026-79707 is a path traversal vulnerability in the builder endpoint of Google Cloud's Agent Development Kit (ADK) for Python. An unauthenticated remote... arbitrary file readpath traversalcveunauthenticatedgoogle https://orbisappsec.com/blog/how-path-traversal-in-open-happens-in-python-and-how-to-fix Python open() Path Traversal: Detection & Fix | Orbis AppSec Jun 6, 2026 - Unsanitized input in Python's open() enables arbitrary file reads. Learn how this high-severity path traversal works and how directory validation stops it. path traversalpythonopendetectionfix https://www.sentinelone.com/vulnerability-database/cve-2025-4186/ CVE-2025-4186: Wangshen SecGate 3600 Path Traversal Flaw Jun 17, 2026 - CVE-2025-4186 is a path traversal vulnerability in Wangshen SecGate 3600. Learn about its impact, affected versions, and mitigation methods. path traversalcveflaw https://devhub.checkmarx.com/cve-details/cve-2011-4532/ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') - CVE-2011-4532 -... Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation... of adirectory pathimproperlimitationpathname https://devhub.checkmarx.com/cve-details/cve-2011-4713/ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') - CVE-2011-4713 -... Directory traversal vulnerability in catalog/content.php in osCSS2 2.1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the... of adirectory pathimproperlimitationpathname https://www.fujifilm.com/fb/en/news/15736e Notice Regarding Path Traversal Vulnerability in FUJIFILM Multifunction Devices and Printers |... path traversal vulnerabilitynoticeregardingfujifilmmultifunction https://www.sentinelone.com/vulnerability-database/cve-2025-69379/ CVE-2025-69379: Upload Files Anywhere Path Traversal Feb 25, 2026 - CVE-2025-69379 is a path traversal vulnerability in Upload Files Anywhere plugin. Learn about its impact, affected versions, and mitigation methods. upload filespath traversalcveanywhere https://advisories.gitlab.com/pypi/accelerate/CVE-2026-69112/ Accelerate path traversal and denial of service via sharded checkpoint weight_map entries | GitLab... CVE-2026-69112 Accelerate path traversal and denial of service via sharded checkpoint weight_map entries: Hugging Face Accelerate through 1.14.0 contains a... denial of servicepath traversalweight mapacceleratevia https://www.immunitysec.com/vulnerabilities/cve-2019-7195/ CVE-2019-7195: QNAP Photo Station Path Traversal Vulnerability Oct 21, 2025 - CVE-2019-7195: This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the… path traversal vulnerabilitycveqnapphotostation https://devhub.checkmarx.com/cve-details/cve-2017-17058/ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in... Jan 9, 2023 - ** DISPUTED ** The WooCommerce plugin for WordPress has a Directory Traversal Vulnerability via a /wp-content/plugins/woocommerce/templates/emails/plain/ URI,... of adirectory pathimproperlimitationpathname https://docs.pingidentity.com/java-agents/2025.11/properties-reference/org.forgerock.agents.reject.path.traversal.attempts.enabled.html Control Handling of Path Traversal Attempts | Java Agents When set to true any incoming URL containing a path segment of .. will cause the incoming request to be rejected with an HTTP 400 response. path traversalcontrolhandlingattemptsjava https://blog.webverselabs-pro.com/challenges/mapleton/ Mapleton Writeup — LFI via Path Traversal | WebVerse Daily Challenge May 17, 2026 - Mapleton walkthrough: traverse out of a legacy PHP realtor's templating into /etc/passwd and the realtor's home directory. WebVerse Pro daily LFI challenge... path traversaldaily challengemapletonwriteuplfi https://advisories.gitlab.com/cargo/onenote_parser/CVE-2026-46671/ Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside... CVE-2026-46671 Rust OneNote File Parser: Path traversal in `Parser::parse_notebook` allows reading files outside the notebook directory: A maliciously crafted... path traversalrustonenotefileparser https://www.sentinelone.com/vulnerability-database/cve-2026-15801/ CVE-2026-15801: CRI-O Path Traversal Vulnerability Sep 22, 2026 - CVE-2026-15801 is a path traversal vulnerability in CRI-O container runtime. Learn about its impact, affected versions, and mitigation methods. path traversal vulnerabilitycvecri https://cvefeed.io/cwe/detail/cwe-26-path-traversal-dirfilename CWE-26: Path Traversal: '/dir/../filename' The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize "/dir/../filename"... path traversalcwedirfilename https://advisories.gitlab.com/gem/mail/CVE-2012-2139/ Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | GitLab Advisory... CVE-2012-2139 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'): Directory traversal vulnerability in... of adirectory pathimproperlimitationpathname https://bugzilla.redhat.com/show_bug.cgi?id=2520695 2520695 – (CVE-2026-53584) CVE-2026-53584 libgit2: libgit2: Submodule path traversal allows... path traversalcvesubmoduleallows https://cybersecuritystash.com/news/adobe-coldfusion-cve-2026-48282-kev-path-traversal-triage Adobe ColdFusion CVE-2026-48282 KEV: Path-Traversal RCE Triage for Defenders | Cybersecurity Stash... CISA added Adobe ColdFusion CVE 2026 48282 to KEV on July 7, 2026 after Adobe confirmed limited in the wild exploitation. ColdFusion 2025 Update 9 and... adobe coldfusionpath traversalcvekevrce https://advisories.gitlab.com/maven/org.openrefine/openrefine/CVE-2024-49760/ OpenRefine has a path traversal in LoadLanguageCommand | GitLab Advisory Database (GLAD) CVE-2024-49760 OpenRefine has a path traversal in LoadLanguageCommand: The load-language command expects a lang parameter from which it constructs the path of... has apath traversalopenrefinegitlabadvisory https://watchtowr.com/intelligence/rapid-reaction-gitlab-critical-path-traversal-vulnerability-cve-2026-85706/ GitLab Path Traversal CVE-2026-85706 | watchTowr Sep 18, 2026 - watchTowr Intel is observing in-the-wild probes for the GitLab Path Traversal flaw CVE-2026-85706, letting attackers read arbitrary files in one request. path traversalgitlabcvewatchtowr https://mcz3n.com/bug%20bounty/reports/path-traversal mcz3n | Path Traversal A collection of Path Traversal write-ups and report path traversal https://www.thesmartscanner.com/vulnerability-list/langchain-path-traversal-vulnerability Langchain Path Traversal vulnerability - CVE-2024-7774 | SmartScanner | Web Security A path traversal vulnerability exists in the getFullPath method of langchain-ai/langchainjs version 0.2.5. This vulnerability allows attackers to s... path traversal vulnerabilityweb securitylangchaincve https://supremespy.com/spy-tech-tools-2/wordpress-unauthenticated-path-traversal-leading-to-conditional-rce/ WordPress: Unauthenticated Path Traversal Leading To Conditional RCE - Supreme Spy Sep 23, 2026 - Security researchers have identified an unauthenticated path traversal flaw in WordPress, potentially leading to remote code execution under certain conditions. path traversalleading towordpressunauthenticatedconditional https://www.openwall.com/lists/oss-security/2026/04/11/3 oss-security - [kubernetes] CVE-2026-3865: CSI Driver for SMB path traversal via subDir may delete... path traversalosssecuritykubernetescve https://certvde.com/en/advisories/VDE-2025-015 CODESYS Control V3 removable media path traversal removable mediapath traversalcodesyscontrol https://codeant.ai/vulnerability-database/cve-2026-91751 Path Traversal (CWE-22) in Flextype Entries REST API Flextype CMS contains a path traversal flaw in its Entries REST API, letting API token holders read, create, or overwrite files beyond the entries directory. path traversalrest apicweentries https://advisories.gitlab.com/maven/org.jenkins-ci.plugins/report-info/CVE-2024-5273/ Jenkins Report Info Plugin Path Traversal vulnerability | GitLab Advisory Database (GLAD) CVE-2024-5273 Jenkins Report Info Plugin Path Traversal vulnerability: Jenkins Report Info Plugin 1.2 and earlier does not perform path validation of the... path traversal vulnerabilityjenkins reportinfoplugingitlab https://docs.moderne.io/openrewrite-advanced-program-analysis/security/path-traversal/ Path traversal detection | Moderne Docs Detect and prevent path traversal vulnerabilities in file system operations. path traversaldetectionmodernedocs https://www.penscan.org/blog/path-traversal-cwe-26/ What is Path Traversal (CWE-26)? Jul 27, 2026 - Path Traversal (CWE-26) occurs when a web application uses external input to construct a pathname that resolves outside of a restricted directory, leading... what ispath traversalcwe https://ics-cert.kaspersky.ru/advisories/2023/11/08/klcert-22-211-telit-cinterion-thales-gemalto-modules-relative-path-traversal KLCERT-22-211: Telit Cinterion (Thales/Gemalto) modules. Relative Path Traversal | Kaspersky ICS... A CWE-23: Relative Path Traversal vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81,... telit cinterionrelative paththalesgemaltomodules https://db.fluidattacks.com/rul/SAST-VESSF/ Javascript Path Traversal Vulnerability Express | Fluid Attacks Database Javascript: Detects path traversal vulnerabilities in Express.js applications where user-controlled input could be used to access files outside the… path traversal vulnerabilityfluid attacksjavascriptexpressdatabase https://news.whitewallet.app/breaking/langflow-cve-2026-5027-path-traversal-active-exploit/ Active exploitation of Langflow bug CVE-2026-5027 path-traversal Jun 10, 2026 - Unpatched Langflow path-traversal CVE-2026-5027 lets attackers write files via POST /api/v2/files, enabling unauthenticated RCE; ~7,000 instances exposed. path traversalactiveexploitationbugcve https://o3.security/vulnerability/CVE-2026-102811 CVE-2026-102811: marmite Path Traversal Oct 2, 2026 - CVE-2026-102811 is a security vulnerability. It affects marmite. Marmite through 0.4.2 Unauthenticated API Access via Development Server See affected… path traversalcvemarmite https://leibling.de/cve-2025-12638-path-traversal-vulnerability-in-keras-team-keras-via-tar-archive-extraction-in-keras-utils-get_file/ CVE-2025-12638 Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in... path traversal vulnerabilitytar archivecvekerasteam https://cyberthreatintelligence.net/cve/CVE-2021-26086 CVE-2021-26086 — Atlassian Jira Server and Data Center Path Traversal Vulnerability | Cyber Threat... Oct 12, 2026 - CVE-2021-26086 — Atlassian Jira Server and Data Center Path Traversal Vulnerability. Affects Atlassian Jira Server and Data Center. Rated MEDIUM (CVSS 5.3).... path traversal vulnerabilityatlassian jiradata centercyber threatcve https://www.sentinelone.com/vulnerability-database/cve-2026-14975/ CVE-2026-14975: WP File Download Path Traversal Vulnerability Sep 8, 2026 - CVE-2026-14975 is a path traversal vulnerability in WP File Download plugin for WordPress. Learn about its impact, affected versions, and mitigation methods. path traversal vulnerabilitycvefiledownload https://www.sentinelone.com/vulnerability-database/cve-2025-26355/ CVE-2025-26355: Q-free Maxtime Path Traversal Vulnerability Jun 17, 2026 - CVE-2025-26355 is a path traversal vulnerability in Q-free Maxtime. Learn about its impact, affected versions, and mitigation methods. path traversal vulnerabilitycvefreemaxtime https://www.stackzero.net/tag/path-traversal/ path traversal Archivi - StackZero In this article, we will be exploring the ins and outs of file inclusion vulnerability exploitation. We will cover what path traversalarchivi https://www.sentinelone.com/vulnerability-database/cve-2025-60050/ CVE-2025-60050: Axiomthemes Panda Path Traversal Flaw Apr 27, 2026 - CVE-2025-60050 is a path traversal vulnerability in Axiomthemes Panda. Learn about its impact, affected versions, and mitigation methods. path traversalcveaxiomthemespandaflaw