PT-2026-99927

Name of the Vulnerable Software and Affected Versions PMWeb versions 7.x through 2025.x Description A path traversal issue exists in the processing of the 'downloader.aspx' endpoint. This occurs when the FullFileName or FileName arguments are manipulated, allowing a remote attacker to access file...

CVE-2026-15953: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Protection and control IED manager PCM600. This issue affects Protection and control IED manager PCM600: through 2.14...

PT-2026-99885

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Protection and control IED manager PCM600. This issue affects Protection and control IED manager PCM600: through 2.14...

CVE-2026-101082: Improper Limitation of a Pathname to a Restricted Directory

A weakness has been identified in PMWeb 7.x/8.x/2025.x. This issue affects some unknown processing of the file downloader.aspx. This manipulation of the argument FullFileName/FileName causes path traversal. The attack may be initiated remotely. The exploit has been made available to the public an...

PT-2026-99959

FreePBX is an open source IP PBX. Prior to versions 16.0.10 and 17.0.5, a critical vulnerability exists in the sound language upload and conversion functionality that allows an authenticated attacker to perform arbitrary file writes, leading directly to remote code execution RCE. Authentication...

CVE-2024-58386: Improper Limitation of a Pathname to a Restricted Directory

ZoneMinder versions 1.37.0 before 1.38.0 contain a path traversal vulnerability in the files view that allows authenticated users to read arbitrary files. The path parameter is not properly validated before being passed to outputfile, enabling attackers with Events view permission to access...

PT-2026-102386

Name of the Vulnerable Software and Affected Versions ZoneMinder versions 1.37.0 through 1.37.x Description Authenticated users with Events view permission can read arbitrary files due to improper validation of the path parameter before it is passed to the output file function. This path traversa...

PT-2026-99890

Name of the Vulnerable Software and Affected Versions Canonical LXD affected versions not specified Description A path traversal issue exists in the Btrfs storage driver within the unpackVolume function. An authenticated user with instance creation privileges can delete or replace arbitrary files...

PT-2026-99881

A security vulnerability has been detected in dbgate up to 7.3.1. Affected by this vulnerability is the function files of the file packages/api/src/controllers/runners.js of the component Files Endpoint. The manipulation of the argument runid leads to path traversal. The attack is possible to be...

CVE-2026-19444: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability was discovered in the Kubernetes kubectl client's kubectl cp command on Windows. When copying files from a container, kubectl runs tar inside the container to build a tar archive, transfers it over the network, and unpacks it on the local machine. If the tar binary ...

CVE-2026-101066: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was determined in dbgate up to 7.3.1. The impacted element is the function createLink of the file packages/api/src/controllers/archive.js of the component Archive Link Creation. This manipulation of the argument linkedFolder causes path traversal. The attack may be initiated...

CVE-2026-101070: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability has been detected in dbgate up to 7.3.1. Affected by this vulnerability is the function files of the file packages/api/src/controllers/runners.js of the component Files Endpoint. The manipulation of the argument runid leads to path traversal. The attack is possible to be...

CVE-2026-85526: Improper Limitation of a Pathname to a Restricted Directory

Path traversal in the Btrfs storage driver unpackVolume in Canonical LXD on Linux allows an authenticated user with instance creation privileges to delete or replace arbitrary files and directories on the host filesystem as root via a crafted subvolumes.path entry in backup/optimizedheader.yaml...

PT-2026-99877

Name of the Vulnerable Software and Affected Versions dbgate versions prior to 7.3.2 Description A path traversal issue exists in the Export Handler component within the exportModelSql function of the packages/api/src/controllers/databaseConnections.js file. A remote attacker can manipulate the...

PT-2026-99891

Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.0.2 through 4.0.13 Canonical LXD version 5.0.10 Canonical LXD version 5.21.8 Canonical LXD version 6.10 Description A path traversal issue exists in the CLI client image export and copy functionality. A remote maliciou...

PT-2026-99889

Name of the Vulnerable Software and Affected Versions Canonical LXD versions 4.0.2 through 4.0.13 Canonical LXD versions 5.0.0 through 5.0.9 Canonical LXD versions 5.21.0 through 5.21.7 Canonical LXD versions 6.0.0 through 6.9.x Description A path traversal issue exists in the btrfs storage drive...

PT-2026-99861

Name of the Vulnerable Software and Affected Versions dbgate versions prior to 7.3.2 Description A path traversal issue exists in the Archive Link Creation component. A remote attacker can manipulate the linkedFolder argument within the createLink function located in the...

CVE-2026-73642: Improper Limitation of a Pathname to a Restricted Directory

Dayforce Payroll is vulnerable to Path Traversal in file download functionality. An unauthenticated attacker can sent GET request with file path parameter set to any path including an absolute local file path. Because vendor contact attempts were unsuccessful, the vulnerability has only been...

CVE-2026-82915: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bimser Solution Software Trade Inc. EBA Plus Document and Workflow Management System allows Path Traversal. This issue affects eBA Plus Document and Workflow Management System: from 6.7.141 before 10.0.1...

CVE-2026-85185: Improper Limitation of a Pathname to a Restricted Directory

Path traversal in the btrfs storage driver in Canonical LXD versions 4.0.2 and later fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create instances in a project to delete arbitrary files on the host as root. On hosts whose root filesystem is...