Gradio - Absolute Path Traversal

Gradio 6.7 on Windows with Python 3.13+ contains an absolute path traversal caused by incorrect path validation in path joining logic, letting unauthenticated attackers read arbitrary files from the server. id: CVE-2026-28414 info: name: Gradio - Absolute Path Traversal author: 0xAkoko severity:...

EUVD-2026-117414

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache Juneau. The microservice DirectoryResource does not keep request paths inside its configured root directory. When an application enables the resource's view, upload or delete settings all off by...

EUVD-2026-115900

Foxel through 2.4.0 contains a missing authentication vulnerability that allows unauthenticated attackers to read files by requesting the /api/fs/stream and /api/fs/thumb endpoints. Attackers can supply a VFS mount prefix and relative path to retrieve full file contents or thumbnails across all...

EUVD-2026-115889

Koodo Reader through 2.4.6 contains a path traversal vulnerability in the self-hosted HTTP server's OPDS handlers that allows authenticated attackers to read files outside the upload directory. Attackers can upload a crafted books.db with a cover value containing ../ sequences, then request...

CVE-2026-121555: DrizzleTime Foxel: Foxel through 2.4.0 contains a missing authentication vulnerability that allows unauthenticated attackers to read files…

Foxel through 2.4.0 contains a missing authentication vulnerability that allows unauthenticated attackers to read files by requesting the /api/fs/stream and /api/fs/thumb endpoints. Attackers can supply a VFS mount prefix and relative path to retrieve full file contents or thumbnails across all...

CVE-2026-121453: dataease SQLBot: SQLBot through 1.10.3 contains a path traversal vulnerability in the importToDb endpoint that allows authenticated…

SQLBot through 1.10.3 contains a path traversal vulnerability in the importToDb endpoint that allows authenticated workspace administrators to read files via an unsanitized filePath parameter. Attackers can supply absolute paths or ../ sequences to import CSV or spreadsheet files, including other...

CVE-2026-95776: Hewlett Packard Enterprise (HPE) Fabric Composer: An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be…

An authenticated path traversal vulnerability exists in the API of HPE Networking Fabric Composer, which could be exploited by an authenticated low-privileged user if certain preconditions outside of the attacker's control are met. Successful exploitation could allow an attacker to read certain...

CVE-2026-120313

Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath that allows attackers to escape the base directory using sibling-directory paths. Attackers can supply paths whose directory name shares a string prefix with the base, bypassing the unanchored startsWi...

CVE-2026-120313

Network-AI versions prior to 5.15.5 are vulnerable to a path traversal vulnerability in the InputSanitizer.sanitizePath() function. The root cause is an unanchored startsWith check , which allows attackers to bypass directory restrictions by supplying sibling-directory paths that share a string p...

CVE-2026-120313 Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath

Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath that allows attackers to escape the base directory using sibling-directory paths. Attackers can supply paths whose directory name shares a string prefix with the base, bypassing the unanchored startsWi...

CVE-2026-120313 Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath

Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath that allows attackers to escape the base directory using sibling-directory paths. Attackers can supply paths whose directory name shares a string prefix with the base, bypassing the unanchored startsWi...

CVE-2026-120313 Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath

Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath that allows attackers to escape the base directory using sibling-directory paths. Attackers can supply paths whose directory name shares a string prefix with the base, bypassing the unanchored startsWi...

EUVD-2026-115002

Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath that allows attackers to escape the base directory using sibling-directory paths. Attackers can supply paths whose directory name shares a string prefix with the base, bypassing the unanchored startsWi...

CVE-2026-120313: Jovancoding Network-AI: Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath() that allows attackers…

Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath that allows attackers to escape the base directory using sibling-directory paths. Attackers can supply paths whose directory name shares a string prefix with the base, bypassing the unanchored startsWi...

PT-2026-135260

Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath that allows attackers to escape the base directory using sibling-directory paths. Attackers can supply paths whose directory name shares a string prefix with the base, bypassing the unanchored startsWi...

PT-2026-134895

Name of the Vulnerable Software and Affected Versions Oray Pugongying X5 Pro versions prior to 7.6.1 Description A remote attacker can perform relative path traversal by manipulating the filename argument within the config restore ex function located in the /etc/openwrt release file. This allows...

SUSE CVE-2026-119546

Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a path traversal vulnerability in restore-repo that allows attackers to read files outside the dump directory via crafted asset paths. Attackers can supply a dump whose release.yml DownloadURL or PatchURL contains...

CLEANSTART-2024-DB97012 pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in t...

Security vulnerability affects the xen package. The pygrub boot loader emulator in Xen, when nul-delimited output format is requested, allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host via NUL bytes in the bootloader configuration file...

CVE-2026-119708

abp-next-admin 10.4.0 through 10.7.0 contains a cross-tenant authorization bypass in the BlobManagement download-by-name endpoint, letting authenticated users read other tenants' files. Attackers supply a victim tenantId in the request path, causing DownloadByNameAsync to switch tenant context an...

CVE-2026-117183

A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the intended directory, as well as read and overwrite files on the server via a crafted URL...