133861 matches found
PT-2026-88764
Tanium addressed a path traversal vulnerability in Tanium Data Service...
PT-2026-89202
Name of the Vulnerable Software and Affected Versions GitHacker versions prior to 1.1.8 Description GitHacker fails to validate path segments parsed from an attacker-controlled .git/HEAD file before joining them to the output directory. A malicious server can coerce the tool into reading arbitrar...
PT-2026-88882
The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...
CVE-2026-87927: Improper Control of Filename for Include/Require Statement in PHP Program
MaxSite CMS through 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers that allows unauthenticated attackers to execute privileged handler files by supplying base64-encoded path traversal sequences. Attackers can bypass path validation checks and execu...
PT-2026-88939
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...
PT-2026-88826
Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege...
PT-2026-89194
Name of the Vulnerable Software and Affected Versions eKuiper versions prior to 2.4.1 Description A path traversal issue in administrative management endpoints allows privileged users or attackers with access to management APIs to delete arbitrary files or directories on the host system. In the...
CVE-2026-87815: External Control of File Name or Path
SiYuan versions before v3.8.2 contain a path traversal vulnerability in the /api/riff/removeRiffDeck endpoint that fails to validate the deckID parameter. An authenticated administrator can supply path traversal sequences to delete arbitrary .deck and .cards files outside the workspace directory...
CVE-2026-87030: Improper Limitation of a Pathname to a Restricted Directory
Tanium addressed a path traversal vulnerability in Comply...
PT-2026-89262
Name of the Vulnerable Software and Affected Versions Direct Download for WooCommerce versions prior to 1.20 Description A Directory Traversal issue exists in the top-level include function. This allows unauthenticated attackers to read arbitrary files on the server, potentially exposing sensitiv...
CVE-2026-87747: Relative Path Traversal
The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...
PT-2026-88953
Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.2 Description An authenticated administrator can exploit a path traversal issue via the '/api/riff/removeRiffDeck' endpoint. The system fails to properly validate the deckID parameter, allowing the use of path...
PT-2026-89180
Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlled file paths could be used without ensuring that the resulting destination remained within the intended extraction directory. An attacker...
CVE-2026-88069: Improper Limitation of a Pathname to a Restricted Directory
Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlled file paths could be used without ensuring that the resulting destination remained within the intended extraction directory. An attacker...
PT-2026-89266
Name of the Vulnerable Software and Affected Versions WP BackItUp Community Edition versions prior to 2.1.1 Description An issue exists where authenticated attackers with administrator-level access and above can perform Directory Traversal, a technique used to access files and directories that ar...
CVE-2026-14505: Improper Limitation of a Pathname to a Restricted Directory
Tanium addressed a path traversal vulnerability in Tanium Data Service...
CVE-2026-87023: Improper Limitation of a Pathname to a Restricted Directory
Tanium addressed a path traversal vulnerability in Comply...
PT-2026-88773
Tanium addressed a path traversal vulnerability in Comply...
Kibana 8.x < 8.19.18 / 9.x < 9.4.3 Path Traversal (ESA-2026-157)
The version of Kibana installed on the remote host is 8.x prior to 8.19.18, or 9.x prior to 9.4.3. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-157 advisory. - Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 in the Kibana Fleet...