CVE-2026-8066: Relative Path Traversal

A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in...

Security update for erlang27

This update for erlang27 fixes the following issues: CVE-2026-42792: epmd permanent DoS via EMFILE on accept2 in erts bsc1272908. CVE-2026-47078: Relative path traversal in zip:unzip/zip:extract via checkdirlevel depth-counter bypass bsc1272909. CVE-2026-48855: Exposure of Sensitive Information t...

CVE-2026-93537: Relative Path Traversal

A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push access, or through permission to create or modify a GitRepo, can cause SUSE Rancher Fleet to read files from the filesystem of the environment that processes the bundle and include...

Relative Path Traversal

Apache Tika is vulnerable to relative path traversal. The vulnerability is due to insufficient validation of the Study Assay File Name value in the ISA-Tab parser, where the parser concatenates the provided filename with the dataset directory without sanitizing path components and an attacker who...

Fleet Server Host Service Identification Processing Bypass

The vulnerability of the identification processing mechanism of the Kibana data visualization service Fleet Server Host is related to errors in the mechanism for processing relative paths to the catalog. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions...

SUSE CVE-2026-93712

Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside publicdir via relative path segments in the File route handler. The handler joins the request path onto publicdir without collapsing relative segments, and checks only that the result is a readable regular file. A request...

Cisco Secure Email and Web Manager Relative Path Handling

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to deficiencies in the handling of relative paths. Exploiting these vulnerabilities can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

CVE-2026-93712

The Dancer2 framework (versions 2.1.0 before 2.2.0 ) for Perl is vulnerable to a directory traversal flaw in the File route handler . The handler fails to collapse relative path segments, allowing an unauthenticated request to escape the public_dir using sequences like /../outside.txt or percent-...

CVE-2026-93712 Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside public_dir via relative path segments in the File route handler

Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside publicdir via relative path segments in the File route handler. The handler joins the request path onto publicdir without collapsing relative segments, and checks only that the result is a readable regular file. A request...

ROS-20260922-73-0113

The vulnerability in golang-github-rancher-local-path-provisioner is related to errors in handling relative pathnames to the directory. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

PT-2026-96326

Name of the Vulnerable Software and Affected Versions Dancer2 versions 2.1.0 through 2.1.x Description The File route handler allows the serving of files from outside the public dir directory through the use of relative path segments. This occurs because the handler joins the request path to the...

CVE-2026-93468

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files...

CVE-2026-93468 HGiga｜OAKlouds - Arbitrary File Read

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files...

CVE-2026-93468

HGiga OAKlouds contains an Arbitrary File Read vulnerability caused by Relative Path Traversal , allowing unauthenticated remote attackers to read arbitrary system files. CVSS 3.1 scores it 7.5 (HIGH) with network vector, low complexity, and no privileges required. No specific affected version, p...

EUVD-2026-82642

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files...

CVE-2026-93468 HGiga｜OAKlouds - Arbitrary File Read

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files...

PT-2026-95227

Name of the Vulnerable Software and Affected Versions OAKlouds affected versions not specified Description An Arbitrary File Read issue exists in OAKlouds developed by HGiga. Unauthenticated remote attackers can use Relative Path Traversal—a technique used to access files and directories stored...

CVE-2026-93468: Relative Path Traversal

The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files...

CVE-2026-76424: Relative Path Traversal

A vulnerability in the REST API of Cisco ISE could allow an authenticated, remote attacker to upload or copy arbitrary files on an affected device. This vulnerability is due to insufficient validation in file operations. An attacker could exploit this vulnerability by uploading a file with a...

CVE-2023-40772: Relative Path Traversal

A directory Traversal vulnerability in DataEase before 1.18.10 allows a remote attacker to obtain sensitive information via a a crafted request to the StaticResourceController.java component...