PT-2026-87614

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

CVE-2026-69807: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...

CVE-2026-62801: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-77897: Relative Path Traversal

Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...

PT-2026-88510

Impact The Elasticsearch and ElasticSecurity nodes built REST endpoints by interpolating user-provided identifiers straight into the request path. A value containing path separators or dot segments changed which endpoint the request actually reached, so an operation intended for one document coul...

PT-2026-88281

External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network...

PT-2026-87474

Name of the Vulnerable Software and Affected Versions Windows Compressed Folder affected versions not specified Description An improper limitation of a pathname to a restricted directory, known as path traversal, allows an authorized attacker to elevate privileges locally. Path traversal is a...

CVE-2026-74239: Improper Limitation of a Pathname to a Restricted Directory

XenForo before 2.3.13 contains a path traversal vulnerability in the style archive importer on Windows deployments that allows authenticated non-super administrators with style permissions to write arbitrary files outside the intended extraction directory by using backslash-based traversal...

PT-2026-87731

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description External control of a file name or path in .NET allows an unauthorized attacker to elevate privileges over a network. Recommendations At the moment, there is no information about a newer version...

PT-2026-95347

This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failed wwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...

PT-2026-87865

Name of the Vulnerable Software and Affected Versions Windows DNS affected versions not specified Description A relative path traversal issue in Windows DNS allows an authorized attacker to elevate privileges locally, which can lead to full system compromise. Recommendations At the moment, there ...

PT-2026-95568

This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failed wwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...

PT-2026-88273

Name of the Vulnerable Software and Affected Versions Adobe Commerce affected versions not specified Magento Open Source affected versions not specified Adobe Commerce B2B affected versions not specified Description An Improper Limitation of a Pathname to a Restricted Directory, also known as Pat...

Linux Distros Unpatched Vulnerability : CVE-2026-6377

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Next4Biz Information Technologies Inc. CSM Customer Service...

CVE-2026-47680: Relative Path Traversal

The source-controller is a Kubernetes operator, specialised in artifacts acquisition from external sources such as Git, OCI, Helm repositories and S3-compatible buckets. In versions 0.0.17 through 1.8.4, an actor with the ability to influence the contents of a bucket referenced by a Bucket resour...

CVE-2026-79904: Improper Limitation of a Pathname to a Restricted Directory

Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intende...

ROS-20260908-73-0093

The vulnerability of the Repo.clonefrom and Repo.clone functions in the git/repo/base.py module of the GitPython library for interacting with Git repositories is related to an incorrect path name limitation when processing the --separate-git-dir parameter. Exploiting this vulnerability could allo...

PT-2026-88518

OPNsense is a FreeBSD based firewall and routing platform. Prior to version 26.1.9 of opnsense/core and version 26.4 20 of BE/opnsense/core, a path traversal vulnerability in the NTP configuration module allows an attacker to overwrite arbitrary files on the system as the root user. By manipulati...

CVE-2026-69612: Absolute Path Traversal

Absolute path traversal in Windows Error Reporting allows an authorized attacker to elevate privileges locally...

PT-2026-95575

This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failed wwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...