fortinet-fortiweb-cve-2025-64446-58034

Fortinet FortiWebの脆弱性について CVE-2025-64446, CVE-2025-58034 1. 概要 Fortinet FortiWebは、Webアプリケーションファイアウォール（WAF）であり、 エンタープライズシステムで広く導入され、 Webアプリケーションを一般的な脅威から保護しています。 FortiWebは通常、保護の中核層に位置するため、 認証やOSコマンド実行に関する脆弱性は、 背後にあるインフラ全体に深刻な影響を及ぼす可能性があります。 2025年には、FortiWebにおいて2つの深刻な脆弱性が公表されました。 CVE-2025-64446 –...

CVE-2025-64446-PoC---FortiWeb-Path-Traversal

CVE-2025-64446 PoC - FortiWeb Path Traversal 描述 Proof of Concept 用于 Fortinet FortiWeb CVE-2025-64446 中的相对路径遍历漏洞，该漏洞允许执行管理命令。 技术细节 CVE: CVE-2025-64446 CVSS: 9.8 CRITICAL AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 类型: Relative Path Traversal CWE-23 受影响软件: FortiWeb 8.0.0 - 8.0.1 FortiWeb 7.6.0 - 7.6.4...

CVE-2026-79728

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker...

CVE-2026-79728

Dell Secure Connect Gateway 5.0 (SCG) Appliance and Application versions are affected by a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this flaw to gain filesystem access on the target system. The Dell-assigned CVSS 3.1 score is ...

EUVD-2026-74725

The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...

CVE-2026-87747 Ragic｜Enterprise Cloud Database - Arbitrary File Read

The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...

EUVD-2026-73887

Relative path traversal in Power Automate allows an authorized attacker to elevate privileges locally...

CVE-2026-80130

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to remote execution...

CVE-2026-80130

CVE-2026-80130 affects Dell Secure Connect Gateway (SCG) 5.0 , specifically the Appliance (versions prior to 5.36.00.16 ) and the Application (versions prior to 5.36.00.00 ). The root cause is a Relative Path Traversal vulnerability that allows a low-privileged attacker with remote access to achi...

CVE-2026-80133

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution...

CVE-2026-80133

Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 are affected by a Relative Path Traversal vulnerability. An unauthenticated attacker with remote network access could potentially exploit this flaw to achieve remote code exec...

PT-2026-86760

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution...

GHSA-F78G-9385-QXQJ Apache Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result

Relative path traversal vulnerability in Apache Camel Google Storage component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-google-storage consumer downloads Google Cloud Storage objects to the local filesystem when th...

Astra Linux – Vulnerability in Tomcat9

Apache Tomcat has a Relative Path Traversal vulnerability. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This created the possibility that, for rewrite rules that modify query parameters into the URL, an attacker could manipulate the...

CVE-2026-78212 4MOSAn Security Technology｜4MOSAn Management Center - Arbitrary File Read

4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files...

CVE-2026-78212

4MOSAn (4MOSAn Management Center) by 4MOSAn Security Technology Co., Ltd. is affected by an Arbitrary File Read vulnerability caused by a Relative Path Traversal flaw. An unauthenticated remote attacker can exploit this to download arbitrary system files from the affected instance, resulting in a...

EUVD-2026-64708

4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files...

Kibana 8.x < 8.19.17 / 9.0.x < 9.3.6 / 9.4.x < 9.4.3 Vulnerability (ESA-2026-94)

The version of Kibana installed on the remote host is 8.x prior to 8.19.17, 9.0.x prior to 9.3.6, or 9.4.x prior to 9.4.3. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-94 advisory. - Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of...

BIT-KIBANA-2026-72677 Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources

Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored...

CVE-2026-72677

Kibana Fleet is affected by a Relative Path Traversal (CWE-23) that can enable unauthorized deletion of Kibana resources. The issue arises from accepting a user-supplied Fleet Server host configuration identifier without rejecting relative traversal sequences; the identifier is stored as provided...