CVE-2026-51026: Relative Path Traversal

Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a crafted request...

CVE-2026-15415: Relative Path Traversal

AWS HealthOmics is a HIPAA-eligible service that fully manages the compute, storage, and workflow engine infrastructure required to run bioinformatics analyses at scale for clinical diagnostics, drug discovery, and agricultural research. Improper limitation of a pathname to a restricted directory...

ViPNet Client Automatic Software Update Relative Path Privilege Escalation

The vulnerability of the automatic software update mechanism of the ViPNet Client 4 system is related to deficiencies in the handling of relative paths. Exploiting this vulnerability could allow a perpetrator operating from a neighboring trusted network to compromise the integrity of the operatin...

CVE-2026-48784 Symfony: UrlGenerator Dot-Segment Encoding Skips Every Other Chained `../` or `./` → Generated URL Collapses Off-Route Under RFC 3986 Normalization

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Prior to 5.4.53, 6.4.41, 7.4.13, and 8.0.13, UrlGenerator::doGenerate used strtr dot-segment encoding that skipped every other chained ../ or ./ segment, allowing attacker-controlled route parameters...

EUVD-2026-43787

Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network...

CVE-2026-56196

Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network...

CVE-2026-50454

Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally...

CVE-2026-50426

Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network...

CVE-2026-50663

Relative path traversal in Age of Empires II: Definitive Edition Game allows an unauthorized attacker to execute code over a network...

CVE-2026-40400

Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network...

EUVD-2026-44251

Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network...

CVE-2026-50663

CVE-2026-50663 affects Age of Empires II: Definitive Edition. The vulnerability is a relative path traversal in the game that could allow an unauthorized attacker to execute code over the network. The current documents specify the impact as remote code execution with high severity (CVSS 3.1: AV:N...

Windows User Interface Core Elevation of Privilege Vulnerability

Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally...

Windows Admin Center (WAC) Remote Code Execution Vulnerability

Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network...

CVE-2026-50454: Relative Path Traversal

Relative path traversal in Windows User Interface Core allows an authorized attacker to elevate privileges locally...

PT-2026-58431

Name of the Vulnerable Software and Affected Versions Windows AppResolver affected versions not specified Description An authorization flaw in the Windows AppResolver allows for local privilege escalation. An attacker can exploit this issue to bypass container isolation, moving from a...

CVE-2026-14903: Relative Path Traversal

Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker to read arbitrary files outside the web root...

CVE-2026-56196: Relative Path Traversal

Relative path traversal in Windows Admin Center allows an authorized attacker to execute code over a network...

CVE-2026-40400: Relative Path Traversal

Relative path traversal in Windows PowerShell allows an authorized attacker to execute code over a network...

PT-2026-58405

Name of the Vulnerable Software and Affected Versions DNS Server affected versions not specified Description A relative path traversal issue allows an authorized attacker to execute arbitrary code over an adjacent network, which can affect the system. Path traversal is a flaw that allows an...