PT-2026-112025

Name of the Vulnerable Software and Affected Versions Windows SmartScreen affected versions not specified Description Improper resolution of path equivalence allows an unauthorized attacker to bypass a security feature over a network. Recommendations At the moment, there is no information about a...

PT-2026-111858

MP Manager through 1.1.0 contains a path traversal vulnerability that allows attackers to write files outside the extraction folder by bypassing the non-recursive sanitizeEntryName filter. Attackers can craft TAR, 7z or RAR entries named ....//file that become ../file, creating or overwriting fil...

PT-2026-111854

muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outside the destination folder by bypassing its ZipSlip check with unnormalized remote paths. Attackers can craft TAR or ZIP entries like ../../.ssh/authorized keys that, when...

PT-2026-111938

Name of the Vulnerable Software and Affected Versions Visual Studio Code versions prior to 1.141.1 Description An issue exists where improper limitation of a pathname to a restricted directory, known as path traversal, allows an unauthorized attacker to execute code over a network. Path traversal...

PT-2026-111930

🚨 CVE-2026-102226 Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network. 🎖@cveNotify...

PT-2026-111925

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. affected versions not specified Description Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network. WebDAV is an extension of the HTTP protoco...

PT-2026-113529

CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in an arbitrary file system write. An attacker could leverage this vulnerability to write to unauthorized files or directories outside of intended...

PT-2026-112114

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

PT-2026-111836

Stonewuu ai-fusion-video through 1.2.0 contains a path traversal vulnerability that allows authenticated users to write uploaded files outside the media directory via the subDir parameter of POST /api/storage/upload. Attackers can supply parent-directory sequences that...

PT-2026-112017

Name of the Vulnerable Software and Affected Versions Microsoft .NET Framework versions 3.5 through 4.8.1 Description An untrusted search path issue exists that allows an authenticated local attacker to bypass Windows Defender Application Control WDAC restrictions. The attack involves using a...

PT-2026-113306

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager affected versions not specified Description An Improper Limitation of a Pathname to a Restricted Directory, also known as Path Traversal, allows a low-privileged attacker to perform arbitrary file system writes. This...

PT-2026-113289

Dimension is affected by an Untrusted Search Path vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. A local attacker with user permissions could exploit this vulnerability to...

PT-2026-113338

Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary directory by supplying an unanchored tmpFolderName value in the upload destination path. Attackers can exploit this flaw, for example by...

PT-2026-112948

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute arbitrary code over a network, which can affect the system...

PT-2026-113390

ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

PT-2026-112863

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An authorized attacker can disclose information over a network due to a path traversal issue, which occurs when a system fails to properly limit a pathname to a restricted...

PT-2026-112488

Name of the Vulnerable Software and Affected Versions Windows Encrypting File System EFS affected versions not specified Description An absolute path traversal issue exists that allows an authorized attacker to disclose sensitive information over a network. Recommendations At the moment, there is...

PT-2026-112541

Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network...

PT-2026-112638

Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A relative path traversal issue allows an authorized attacker to elevate privileges locally on the system. Recommendations At the moment, there is no information about a newer version...

PT-2026-112684

Name of the Vulnerable Software and Affected Versions OpenSSH for Windows affected versions not specified Description A relative path traversal issue allows an unauthorized remote attacker to execute arbitrary code over a network, potentially compromising the affected system. Recommendations At t...