CVE-2026-21082: Relative Path Traversal

Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...

CVE-2026-69112: Improper Limitation of a Pathname to a Restricted Directory

Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...

CVE-2026-15059: Improper Limitation of a Pathname to a Restricted Directory

Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...

CVE-2026-72903: Improper Limitation of a Pathname to a Restricted Directory

Tabby formerly Terminus is a highly configurable terminal emulator. Prior to 1.0.235, a malicious SFTP server can return a backslash traversal filename through entry.name. In tabby-ssh/src/session/sftp.ts, SFTPSession.readdir and makeFile use POSIX path processing that preserves the backslashes a...

PT-2026-69915

Name of the Vulnerable Software and Affected Versions Hugging Face Accelerate versions prior to 1.15.0 Description A path traversal issue exists in the load checkpoint in model and load checkpoint and dispatch functions. These functions do not properly sanitize weight map entries within sharded...

PT-2026-69972

Name of the Vulnerable Software and Affected Versions Tabby versions prior to 1.0.235 Description A malicious SFTP server can return a backslash traversal filename through the entry.name variable. The SFTPSession.readdir and makeFile functions in tabby-ssh/src/session/sftp.ts use POSIX path...

PT-2026-69945

Name of the Vulnerable Software and Affected Versions unearth versions prior to 0.18.2 Description A path traversal issue exists in the is within directory function, which fails to normalize paths before validation. This allows ../ sequences to bypass directory containment checks. An attacker can...

PT-2026-69838

Name of the Vulnerable Software and Affected Versions systemd-oomd affected versions not specified Description Local unprivileged users can terminate arbitrary local processes through a systemd-oomd IPC API. This is possible due to a missing path traversal validation, which allows an attacker to...

PT-2026-99858

Name of the Vulnerable Software and Affected Versions kubectl affected versions not specified Description A path traversal issue exists in the kubectl cp command for clients running on Windows. When copying files from a container, the client executes the tar binary within the container to create ...

CVE-2026-72569: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option...

PT-2026-69451

Name of the Vulnerable Software and Affected Versions AsyncFuncAI/deepwiki-open versions prior to commit 16f35a0 Description Improper path validation allows unauthenticated remote attackers to write to or delete arbitrary files with root privileges. The 'api/api.py' wiki-cache endpoint constructs...

CVE-2026-66484: Improper Limitation of a Pathname to a Restricted Directory

GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality. When extracting a tar archive in copy-in mode with the --no-absolute-filenames option, the extracted file name is normalized but the tar hard-link target is passed to the linktoname function without...

Photon OS 5.0: Python3 PHSA-2023-5.0-91-0139

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-91-0139. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

PT-2026-69440

Name of the Vulnerable Software and Affected Versions GNU cpio affected versions not specified Description Path Traversal exists in the tar archive extraction functionality. When extracting a tar archive in copy-in mode using the --no-absolute-filenames option, the extracted file name is...

CVE-2026-73033: Improper Limitation of a Pathname to a Restricted Directory

Sucuri Security WordPress plugin through version 2.7.3 contains a path traversal vulnerability in the pageIntegritySubmission method in src/integrity.lib.php that allows authenticated administrators to delete arbitrary files by supplying directory traversal sequences in the sucuriscanintegrity...

CVE-2026-47754: Improper Limitation of a Pathname to a Restricted Directory

Metacat is data repository software that helps researchers preserve, share, and discover data. Versions 2.x through 2.19.1 and all 1.x versions contain an unauthenticated path traversal in the archiveEntryName parameter of the action=read endpoint that is part of the original 1.x Metacat API...

The vulnerability of the REST API interface implementation of the Splunk Enterprise platform for operational analysis allows a perpetrator to gain unauthorized access to modify files or execute arbitrary code.

The vulnerability of the REST API interface implementation of the Splunk Enterprise platform for operational analysis is related to an incorrect limitation on the path name to the $SPLUNKHOME/etc/ directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access t...

The vulnerability of the config_dirs directive in the NGINX Agent daemon and the NGINX Instance Manager automation platform allows a malicious actor to gain unauthorized access to read and write arbitrary files.

The vulnerability of the configdirs directive in the NGINX Agent and the NGINX Instance Manager automation platform is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to read and write arbitrary...

CVE-2026-18412: Undefined Security Weakness

OpenCart extensions are uploaded as zip files with .ocmod.zip extensions. Upon installation, the OpenCart v4.2.0.0 extension installer extracts these zip files, but does not validate that the extracted paths stay inside the intended extraction directory. An attacker can craft a malicious extensio...

PT-2026-69853

Name of the Vulnerable Software and Affected Versions Metacat versions 1.x through 2.19.1 Description Metacat contains an unauthenticated path traversal issue within the original 1.x API. The action=read endpoint fails to validate the archiveEntryName parameter, which is then concatenated into a...