Total
543 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-77897 | 1 Microsoft | 1 Power Automate For Desktop | 2026-09-29 | N/A | 7.0 HIGH |
| Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2026-76424 | 1 Cisco | 1 Identity Services Engine | 2026-09-28 | N/A | 7.2 HIGH |
| A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device. This vulnerability is due to insufficient validation in file operations. An attacker could exploit this vulnerability by uploading a file with a crafted path. A successful exploit could allow the attacker to upload files to arbitrary locations and execute arbitrary commands as root on the affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. | |||||
| CVE-2026-72948 | 1 Microsoft | 7 Windows 10 1607, Windows 10 1809, Windows Server 2012 and 4 more | 2026-09-24 | N/A | 6.7 MEDIUM |
| Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally. | |||||
| CVE-2023-40772 | 2026-09-22 | N/A | 4.3 MEDIUM | ||
| A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java component. | |||||
| CVE-2023-32778 | 2026-09-22 | N/A | 3.3 LOW | ||
| An issue was discovered in ILIAS 6.23, 7 before 7.22, and 8.1. An attacker can execute arbitrary code via ZIP upload. | |||||
| CVE-2023-29377 | 2026-09-22 | N/A | 6.6 MEDIUM | ||
| An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secure Integration Server through 1.22. By using FileType renames, it is possible to bypass limitations on assignment of a directory path to FileDirectory OPC UA objects and a file path to File OPC UA objects. | |||||
| CVE-2023-45858 | 2026-09-22 | N/A | 8.6 HIGH | ||
| A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files. | |||||
| CVE-2026-93468 | 2026-09-18 | N/A | 7.5 HIGH | ||
| The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files. | |||||
| CVE-2026-40400 | 1 Microsoft | 12 Windows 10 1607, Windows 10 1809, Windows 10 21h2 and 9 more | 2026-09-17 | N/A | 8.0 HIGH |
| Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network. | |||||
| CVE-2026-82765 | 2026-09-16 | N/A | 8.1 HIGH | ||
| Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP. | |||||
| CVE-2026-82768 | 2026-09-16 | N/A | 8.1 HIGH | ||
| Path traversal vulnerability exists in SGA1000. If this vulnerability is exploited, arbitrary files on the server may be viewed and/or altered by an attacker who can access the product via FTP. | |||||
| CVE-2025-67366 | 1 Sylphx | 1 Filesystem Mcp | 2026-09-16 | N/A | 7.5 HIGH |
| @sylphxltd/filesystem-mcp v0.5.8 is an MCP server that provides file content reading functionality. Version 0.5.8 of filesystem-mcp contains a critical path traversal vulnerability in its "read_content" tool. This vulnerability arises from improper symlink handling in the path validation mechanism: the resolvePath function checks path validity before resolving symlinks, while fs.readFile resolves symlinks automatically during file access. This allows attackers to bypass directory restrictions by leveraging symlinks within the allowed directory that point to external files, enabling unauthorized access to files outside the intended operational scope. | |||||
| CVE-2026-76440 | 2026-09-15 | N/A | 9.8 CRITICAL | ||
| As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-76440 are related to path traversal issues that are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-23. | |||||
| CVE-2026-79728 | 1 Dell | 1 Secure Connect Gateway | 2026-09-14 | N/A | 6.5 MEDIUM |
| Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker. | |||||
| CVE-2026-80133 | 1 Dell | 1 Secure Connect Gateway | 2026-09-11 | N/A | 7.4 HIGH |
| Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. | |||||
| CVE-2026-89065 | 2026-09-11 | N/A | 7.1 HIGH | ||
| Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delete files and directories outside the project directory that are writable by the environment running projen, via crafted entries in the version-controlled generated file manifest that is consumed during project synthesis. To remediate this issue, users should upgrade to version 0.101.37. The corrected containment check is automatically applied by the projen runtime next time you run it. | |||||
| CVE-2026-84939 | 1 Apache | 1 Freemarker | 2026-09-11 | N/A | 9.1 CRITICAL |
| Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled (it's by default enabled). This issue affects Apache FreeMarker from 2.2.0 through 2.3.34. Users are recommended to upgrade to version 2.3.35. Disabling localized lookup in previous versions also mitigates this. Note that even in versions affected by this vulnerability, the files that can be loaded remain restricted by the TemplateLoader that FreeMarker is configured to use. In particular, FileTemplateLoader prevents attempts to traverse outside the baseDir specified in its constructor. Other TemplateLoader implementations may allow access outside their designated base directory, but they are still constrained by the underlying storage mechanism—for example, a loader wrapping a Java class loader can only access resources that the class loader can load, while one wrapping a web application context can only access resources available through that context. | |||||
| CVE-2026-15913 | 2026-09-10 | N/A | 7.7 HIGH | ||
| In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read. | |||||
| CVE-2026-87747 | 2026-09-09 | N/A | 4.9 MEDIUM | ||
| The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files. | |||||
| CVE-2026-80130 | 1 Dell | 1 Secure Connect Gateway | 2026-09-09 | N/A | 7.1 HIGH |
| Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to remote execution. | |||||