147560 matches found
PT-2026-111707
Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream handler that allows unauthenticated attackers to read arbitrary files by supplying parent-directory segments in the fullPath and fileName parameters...
Microsoft Windows: CVE-2026-102217: WebDAV Elevation of Privilege Vulnerability
Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network...
WS-2026-0131
mise formerly rtx-cli before 2026.10.9: a path: tool version e.g. node path:./local in an untrusted project's .tool-versions or mise.toml is not subject to the config trust check, so mise activate prepends the project-controlled directory to PATH on cd without a trust prompt, letting a repository...
WS-2026-0155
mlflow 3.10.0 - 3.16.1: the CreateModelVersion prompt branch validates the source only when it carries a URL scheme, so a schemeless relative path e.g. ../../etc is stored as the artifact location and served by get-artifact, giving unauthenticated arbitrary file read GHSA-m65p-9j7q-6w33...
Siemens Industrial Edge Devices
SUMMARY Siemens Industrial Edge Devices contain multiple path traversal vulnerabilities that could facilitate an authenticated remote attacker to access sensitive internal information. Siemens has released new versions for several affected products and recommends to update to the latest...
Siemens Industrial Edge Device Kit
SUMMARY Users of Industrial Edge Devices are advised to consult the respective Security Advisories for their devices for Siemens Industrial Edge devices see Additional Information. Industrial Edge Device Kit contains multiple path traversal vulnerabilities that could facilitate an authenticated...
PT-2026-111374
A security vulnerability has been detected in jbardin scp.py up to 0.16.1. The impacted element is the function recv file/ recv pushd of the component SCP Receive Handler. The manipulation leads to path traversal. Remote exploitation of the attack is possible. Upgrading to version 0.16.2 is...
CVE-2026-110231: Improper Limitation of a Pathname to a Restricted Directory
muCommander through 1.6.2 contains a path traversal vulnerability in UnpackJob that allows attackers to write files outside the destination folder by bypassing its ZipSlip check with unnormalized remote paths. Attackers can craft TAR or ZIP entries like ../../.ssh/authorizedkeys that, when...
Microsoft Windows: CVE-2026-70184: Windows Backup Engine Elevation of Privilege Vulnerability
Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83506: Servicing Stack Updates Elevation of Privilege Vulnerability
Untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-83509: Windows Setup Files Cleanup Elevation of Privilege Vulnerability
Untrusted search path in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...
PT-2026-112315
Name of the Vulnerable Software and Affected Versions Windows Shell affected versions not specified Description A relative path traversal issue exists in Windows Shell. This flaw allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information...
Microsoft Windows: CVE-2026-70222: Windows Shell Elevation of Privilege Vulnerability
Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...
PT-2026-112408
Name of the Vulnerable Software and Affected Versions Servicing Stack Updates affected versions not specified Description An untrusted search path in Servicing Stack Updates allows an authorized attacker to elevate privileges locally, which can lead to a full system compromise. Recommendations At...
CVE-2026-90530: Improper Limitation of a Pathname to a Restricted Directory
ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...
Microsoft Windows: CVE-2026-70142: Windows Update Service Elevation of Privilege Vulnerability
Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally...
CVE-2026-69968: Relative Path Traversal
Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network...
CVE-2026-69973: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows Libarchive allows an unauthorized attacker to perform tampering over a network...
CVE-2026-69979: Improper Protection of Alternate Path
Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally...