CVE-2026-124726

Relative Path Traversal, with Unintended Proxy vulnerability in Apache APISIX. A caller of the MCP endpoint can invoke endpoints the OpenAPI document never declared, under the declared tool's HTTP method, using the credentials the Route adds. This issue affects Apache APISIX: from 3.19.0 before...

CVE-2026-124726 Apache APISIX: openapi-to-mcp tool call can reach an API path the document does not declare

Relative Path Traversal, with Unintended Proxy vulnerability in Apache APISIX. A caller of the MCP endpoint can invoke endpoints the OpenAPI document never declared, under the declared tool's HTTP method, using the credentials the Route adds. This issue affects Apache APISIX: from 3.19.0 before...

EUVD-2026-125675

Relative Path Traversal, with Unintended Proxy vulnerability in Apache APISIX. A caller of the MCP endpoint can invoke endpoints the OpenAPI document never declared, under the declared tool's HTTP method, using the credentials the Route adds. This issue affects Apache APISIX: from 3.19.0 before...

CVE-2026-124726

Apache APISIX versions 3.19.0 before 3.20.0 are vulnerable to a Relative Path Traversal and Unintended Proxy vulnerability. A caller of the MCP endpoint can bypass the OpenAPI document's declared limits to invoke undeclared endpoints using the HTTP method of a declared tool and the credentials ad...

CVE-2026-111435

Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. In ociload.c, ociloadprocessmanifest does not sanitize the Config path of manifest.json. A...

CVE-2026-111435

The openEuler iSulad tool on Linux (versions through 2.1.6 ) is vulnerable to a relative path traversal vulnerability in the src/daemon/modules/image/oci/oci_load.c file. The root cause is that the oci_load_process_manifest() function fails to sanitize the Config path of manifest.json. An attacke...

CVE-2026-111435

Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. In ociload.c, ociloadprocessmanifest does not sanitize the Config path of manifest.json. A...

CVE-2026-111435

Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. In ociload.c, ociloadprocessmanifest does not sanitize the Config path of manifest.json. A...

CVE-2026-111435: openEuler iSulad: Relative path traversal vulnerability in openEuler iSulad on Linux

Relative path traversal vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. In ociload.c, ociloadprocessmanifest does not sanitize the Config path of manifest.json. A...

CVE-2025-64446-PoC---FortiWeb-Path-Traversal

CVE-2025-64446 PoC - FortiWeb Path Traversal Description Proof of Concept for the relative path traversal vulnerability in Fortinet FortiWeb CVE-2025-64446 that allows execution of administrative commands. Technical Details CVE: CVE-2025-64446 CVSS: 9.8 CRITICAL AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...

fortinet-fortiweb-cve-2025-64446-58034

Understanding Fortinet FortiWeb Vulnerabilities CVE-2025-64446, CVE-2025-58034 1. Overview Fortinet FortiWeb is a Web Application Firewall WAF device widely deployed in enterprise systems to protect web applications from common threats. Since FortiWeb typically sits at a central protection layer,...

CVE-2026-118213

Relative path traversal in Windows Deployment Services allows an unauthorized attacker to disclose information over a network...

CVE-2026-113818

Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a network...

CVE-2026-112762

Relative path traversal in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-105505

Relative path traversal in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

CVE-2026-118213

A relative path traversal vulnerability in Windows Deployment Services allows an unauthorized attacker to disclose information over a network. This flaw resides in the Windows Deployment Services component and impacts the confidentiality of system information. Remediation is available through off...

EUVD-2026-122099

Relative path traversal in Windows Deployment Services allows an unauthorized attacker to disclose information over a network...

CVE-2026-105505

A relative path traversal vulnerability in the Microsoft Input Method Editor (IME) allows an authorized attacker to perform a local elevation of privilege . The affected software includes various Windows versions as part of the November 10, 2026, security updates. Remediation is available through...

EUVD-2026-122011

Relative path traversal in Microsoft Input Method Editor IME allows an authorized attacker to elevate privileges locally...

CVE-2026-113818

A relative path traversal vulnerability in Windows Deployment Services allows an authorized attacker to disclose information over a network. While the specific root cause is not detailed, the vulnerability impacts the service's ability to restrict unauthorized file system access. Remediation is p...