PT-2026-112630

Name of the Vulnerable Software and Affected Versions Windows Internet wininet.dll affected versions not specified Description A relative path traversal issue exists in the Windows Internet component wininet.dll. This flaw allows an authorized attacker to perform local tampering. Recommendations ...

VulnCheck KEV: CVE-2026-48866

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Rocketgenius Inc. Gravity Forms allows Path Traversal. This issue affects Gravity Forms: from n/a through 2.10.0.1...

VulnCheck KEV: CVE-2024-30492

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WebToffee Import Export WordPress Users.This issue affects Import Export WordPress Users: from n/a through 2.5.2...

VulnCheck KEV: CVE-2026-1830

The Quick Playground plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.1. This is due to insufficient authorization checks on REST API endpoints that expose a sync code and allow arbitrary file uploads. This makes it possible for unauthenticated...

PT-2026-111932

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an authorized attacker to disclose information over a network...

PT-2026-111707

Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream handler that allows unauthenticated attackers to read arbitrary files by supplying parent-directory segments in the fullPath and fileName parameters...

Microsoft Windows: CVE-2026-70222: Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

PT-2026-112380

Name of the Vulnerable Software and Affected Versions Skype for Business Server versions prior to 2019 CU8 Skype for Business Server versions prior to 2015 CU13 Skype for Business Server Subscription Edition versions prior to CU1 Microsoft Lync affected versions not specified Description An...

Synametrics Syncrify 6.2 Build 1178 PublicLink Path Traversal / Root Command Execution

Synametrics Syncrify version 6.2 build 1178 contains a path traversal issue in the PublicLink chunk-upload handler. An authenticated backup user can write a cron fragment outside the intended upload directory, resulting in root command execution when the service runs as root and cron is active...

Microsoft Windows: CVE-2026-88136: Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network...

PT-2026-111518

NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname to a restricted directory by supplying crafted archive member names to a dSort job. A successful exploit may lead to...

PT-2026-111512

NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limitation of a pathname to a restricted directory by submitting a crafted rename destination directly to an AIStore target,...

PT-2026-113287

Dimension is affected by an Uncontrolled Search Path Element vulnerability that could result in arbitrary code execution in the context of the current user. A local attacker with user permissions could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user...

PT-2026-112381

Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An issue exists where improper limitation of a pathname to a restricted directory, known as path traversal, allows an authorized attacker to disclose information over a...

WS-2026-0155

mlflow 3.10.0 - 3.16.1: the CreateModelVersion prompt branch validates the source only when it carries a URL scheme, so a schemeless relative path e.g. ../../etc is stored as the artifact location and served by get-artifact, giving unauthenticated arbitrary file read GHSA-m65p-9j7q-6w33...

Apache Struts 2 6.3.0.2 Path Traversal / Shell Upload

Apache Struts 2 version 6.3.0.2 contains a path traversal flaw in the legacy file upload interceptor that permits JSP shell upload outside the intended upload directory. This proof of concept demonstrates remote code execution. https://packetstorm.news/download/235382...

Office Online Package ONLYOFFICE Docs Path Traversal

The vulnerability of the office online package ONLYOFFICE Docs DocumentServer is related to incorrect restrictions on the path to the catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Next.js Path Traversal

The vulnerability of the Next.js web application development software platform is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

PT-2026-111563

Name of the Vulnerable Software and Affected Versions Wazuh versions 4.1.1 through 4.14.7 Description A path traversal issue exists in the CDB list handlers within the get lists and delete list file functions. This allows compromised cluster workers to read or delete master files by sending...

PT-2026-113306

Name of the Vulnerable Software and Affected Versions Adobe Experience Manager affected versions not specified Description An Improper Limitation of a Pathname to a Restricted Directory, also known as Path Traversal, allows a low-privileged attacker to perform arbitrary file system writes. This...