149 CVEs — updated 2026-11-02 · vulnfeed
| CVE / ID | Title | Severity | CVSS | EPSS | Source | Date |
|---|---|---|---|---|---|---|
| CVE-2026-61738 | SOCFortress CoPilot focuses on providing a single pane of glass for all your security operations needs. Prior to 0.1.77, | CRITICAL | 10.0 | 46%ile | NVD | 2026-10-30 |
| CVE-2026-113617 | The Automated Import Products to Cart WordPress plugin before 1.0.4 does not sanitize a user-supplied file path before u | CRITICAL | 9.9 | 28%ile | NVD | 2026-10-29 |
| CVE-2026-120307 | The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's | CRITICAL | 9.9 | 42%ile | NVD | 2026-11-01 |
| CVE-2026-120308 | A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path | CRITICAL | 9.9 | 45%ile | NVD | 2026-11-01 |
| CVE-2026-104286 | FortiMail zero-day: unauthenticated arbitrary file write via path traversal (no patch yet) | CRITICAL | 9.8 | 92%ile | Featured | 2026-10-01 |
| GHSA-4xm8-rg9h-jhq2 | Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution | CRITICAL | 9.8 | — | GitHub | 2026-10-30 |
| CVE-2026-105420 | Wing FTP Server does not verify user's base folder. An attacker with admin privileges can add user directories via scrip | CRITICAL | 9.4 | 44%ile | NVD | 2026-10-28 |
| CVE-2026-63190 | FearlessCMS is a flat-file `content` management system centered on simplicity and open source. Prior to version 0.1.4, f | CRITICAL | 9.4 | 46%ile | NVD | 2026-10-28 |
| CVE-2026-119145 | Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handl | CRITICAL | 9.4 | 55%ile | NVD | 2026-10-29 |
| CVE-2026-118633 | A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM | CRITICAL | 9.2 | 48%ile | NVD | 2026-10-28 |
| CVE-2026-90864 | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou | CRITICAL | 9.1 | 41%ile | NVD | 2026-10-29 |
| CVE-2026-90866 | A path traversal vulnerability in Progress Software WS_FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows cou | CRITICAL | 9.1 | 54%ile | NVD | 2026-10-29 |
| CVE-2026-51863 | DB-GPT v0.7.5 and 0.8.0 contains directory traversal in use_example_file (packages/dbgpt-app/src/dbgpt_app/openapi/api_v | CRITICAL | 9.1 | 30%ile | NVD | 2026-10-29 |
| CVE-2026-61645 | Docat is a tool for hosting versioned static documentation. In the affected implementation, an arbitrary file upload vul | CRITICAL | 9.1 | 35%ile | NVD | 2026-10-29 |
| CVE-2026-103882 | The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is vulnerable to arbitra | CRITICAL | 9.1 | 56%ile | NVD | 2026-10-31 |
| CVE-2026-120213 | @fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In v | CRITICAL | 9.1 | — | NVD | 2026-11-02 |
| CVE-2026-86398 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7 | HIGH | 8.8 | 28%ile | NVD | 2026-10-28 |
| CVE-2026-103407 | An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Sessi | HIGH | 8.8 | 14%ile | NVD | 2026-10-28 |
| CVE-2026-117616 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier provides an HTTP endpoint that loads agents by name without validatin | HIGH | 8.8 | 11%ile | NVD | 2026-10-28 |
| CVE-2026-118619 | Ultralytics Google Drive Download Path Traversal Remote Code Execution Vulnerability. This vulnerability allows remote a | HIGH | 8.8 | 45%ile | NVD | 2026-10-28 |
| CVE-2026-110244 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to obtain sensitive information due to | HIGH | 8.8 | 51%ile | NVD | 2026-10-29 |
| CVE-2026-53940 | Conda: Entry-point path traversal in noarch:python install (arbitrary file write) — canonical Python implementation | HIGH | 8.8 | 46%ile | Microsoft | 2026-09-08 |
| CVE-2025-47273 | setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write | HIGH | 8.8 | 76%ile | Microsoft | 2025-05-13 |
| CVE-2026-112350 | Sunhillo SureLine before 9.1.5 contains a path traversal vulnerability in the radarUpdater.cgi endpoint that allows unau | HIGH | 8.7 | 61%ile | NVD | 2026-10-27 |
| CVE-2010-20125 | DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated a | HIGH | 8.7 | 46%ile | NVD | 2026-10-30 |
| CVE-2026-119979 | LM Studio before 0.4.22+1 contains a path traversal vulnerability in the model downloader's resolveDownloadRequest that | HIGH | 8.7 | 34%ile | NVD | 2026-10-30 |
| CVE-2026-120311 | Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in FileJobStore that allows attackers to re | HIGH | 8.7 | — | NVD | 2026-11-02 |
| CVE-2026-120312 | Network-AI from 5.13.4 before 5.15.5 contains a path traversal vulnerability in AgentVCR that allows attackers controlli | HIGH | 8.7 | — | NVD | 2026-11-02 |
| CVE-2026-120313 | Network-AI before 5.15.5 contains a path traversal vulnerability in InputSanitizer.sanitizePath() that allows attackers | HIGH | 8.7 | — | NVD | 2026-11-02 |
| CVE-2026-120315 | LobeHub Chat from 1.84.26 before 2.1.49 contains a path traversal vulnerability that allows authenticated users to write | HIGH | 8.7 | — | NVD | 2026-11-02 |
| CVE-2026-73695 | Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in services/users/index.php | HIGH | 8.7 | — | NVD | 2026-11-02 |
| CVE-2026-73697 | Control Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection vulnerabi | HIGH | 8.7 | — | NVD | 2026-11-02 |
| CVE-2026-115924 | Rembg is a tool to remove images background. Prior to 2.0.82, the public /api/remove endpoint passes attacker-controlled | HIGH | 8.6 | 34%ile | NVD | 2026-10-26 |
| CVE-2026-116682 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read hand | HIGH | 8.6 | 45%ile | NVD | 2026-10-27 |
| CVE-2026-120322 | A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some unknown processing of the file | HIGH | 8.6 | — | NVD | 2026-11-02 |
| CVE-2026-120225 | A weakness has been identified in Oray Pugongying X5 Pro up to 7.6.1. Affected by this vulnerability is the function con | HIGH | 8.5 | 54%ile | NVD | 2026-11-01 |
| CVE-2026-59179 | OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, `@openhop/server` passes unauthenticated | HIGH | 8.3 | 33%ile | NVD | 2026-10-28 |
| CVE-2026-61576 | Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook | HIGH | 8.3 | 39%ile | NVD | 2026-10-29 |
| CVE-2026-61654 | Lightdash is an open source business intelligence platform. In affected versions through 0.3213.0, the dbt Cloud webhook | HIGH | 8.3 | 32%ile | NVD | 2026-10-29 |
| CVE-2026-119557 | n8n from 2.14.0 through 2.46.3 contains a path traversal vulnerability in the Databricks node that allows unauthenticate | HIGH | 8.2 | 42%ile | NVD | 2026-10-30 |
| CVE-2026-62331 | praktor is a multi-agent Claude Code orchestrator with Telegram input and output, Docker isolation, and a Mission Contro | HIGH | 8.2 | 56%ile | NVD | 2026-10-30 |
| CVE-2026-120316 | http4k before 6.62.0.0-ee contains a path traversal vulnerability in ThymeleafTemplates Caching and HotReload that allow | HIGH | 8.2 | — | NVD | 2026-11-02 |
| CVE-2026-117518 | @fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP server. In versions up to and includi | HIGH | 8.2 | — | NVD | 2026-11-02 |
| CVE-2026-70460 | rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink | HIGH | 8.1 | 39%ile | Microsoft | 2026-08-11 |
| CVE-2026-11816 | Path Traversal in keras-team/keras | HIGH | 8.1 | 47%ile | Microsoft | 2026-06-09 |
| CVE-2026-93851 | Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10 fail to validate the target post ID in the Age | HIGH | 8.0 | 19%ile | NVD | 2026-10-28 |
| CVE-2026-79655 | Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file wr | HIGH | 7.8 | 12%ile | Microsoft | 2026-08-11 |
| CVE-2026-84294 | Improper limitation of pathname in the Ad Hoc Transfer component of Progress Software WS_FTP Server versions prior to 20 | HIGH | 7.7 | 29%ile | NVD | 2026-10-29 |
| CVE-2026-92709 | Rsyslog: DynFile Path Traversal → Arbitrary File Write as Root → RCE | HIGH | 7.7 | 32%ile | Microsoft | 2026-10-13 |
| CVE-2025-12638 | Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file() | HIGH | 7.6 | 54%ile | Microsoft | 2025-11-11 |
| CVE-2026-116690 | MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3. | HIGH | 7.5 | 47%ile | NVD | 2026-10-27 |
| CVE-2026-57200 | Asterisk is an open source private branch exchange and telephony toolkit. Prior to Asterisk 20.20.1, 21.12.3, 22.10.1, 2 | HIGH | 7.5 | 59%ile | NVD | 2026-10-27 |
| CVE-2026-15323 | The Product Designer for WooCommerce WordPress | Lumise plugin for WordPress is vulnerable to Directory Traversal in all | HIGH | 7.5 | 58%ile | NVD | 2026-10-28 |
| CVE-2026-118758 | Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the | HIGH | 7.5 | 44%ile | NVD | 2026-10-29 |
| CVE-2026-117183 | A path traversal vulnerability in the FeaturedImage component of astro-notion-blog 0.13.0 allows attackers to escape the | HIGH | 7.5 | 16%ile | NVD | 2026-10-30 |
| CVE-2026-39734 | Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions. | HIGH | 7.5 | 40%ile | NVD | 2026-10-30 |
| CVE-2026-85396 | rubyzip before 3.4.0 Path Traversal in Zip::Entry#extract via Sibling-Directory Prefix | HIGH | 7.5 | 47%ile | Microsoft | 2026-09-08 |
| CVE-2026-82251 | gitoxide before 0.52.1 Path Traversal via Submodule Name | HIGH | 7.5 | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-82253 | gitoxide before 0.82.0 Path Traversal via Submodule Name Validation Bypass | HIGH | 7.5 | 51%ile | Microsoft | 2026-08-11 |
| CVE-2026-78254 | Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write | HIGH | 7.4 | 44%ile | Microsoft | 2026-09-08 |
| CVE-2026-94346 | PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1. | HIGH | 7.2 | 45%ile | NVD | 2026-10-27 |
| CVE-2026-58257 | GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, the databa | HIGH | 7.2 | 40%ile | NVD | 2026-10-27 |
| CVE-2026-116249 | In server mode pgAdmin 4 resolves a server's password file, SSL certificate, key, CRL and SSH tunnel identity file relat | HIGH | 7.2 | 8%ile | NVD | 2026-10-30 |
| CVE-2026-118043 | The Bulk Media Register WordPress plugin before 2.01 does not properly validate a user-supplied path before moving a fil | HIGH | 7.2 | 15%ile | NVD | 2026-10-31 |
| CVE-2026-120444 | GoFound through 1.4.1 contains a path traversal vulnerability that allows unauthenticated attackers to delete arbitrary | HIGH | 7.2 | — | NVD | 2026-11-02 |
| CVE-2026-93864 | A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution a | HIGH | 7.1 | 3%ile | NVD | 2026-10-27 |
| CVE-2026-118038 | In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the | HIGH | 7.1 | 17%ile | NVD | 2026-10-28 |
| CVE-2026-119553 | Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contains a path travers | HIGH | 7.1 | 36%ile | NVD | 2026-10-30 |
| CVE-2026-116240 | In server mode pgAdmin 4 validates a path into the user's storage directory with check_access_permission(), which builds | HIGH | 7.1 | 18%ile | NVD | 2026-10-30 |
| CVE-2026-53784 | rsync < 3.5.0 Path Traversal via Symlink Module Root | HIGH | 7.1 | 15%ile | Microsoft | 2026-08-11 |
| CVE-2026-53785 | rsync < 3.5.0 Path Traversal Write Escape via --relative Mode | HIGH | 7.1 | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-82455 | RubyGems before 4.0.13 Path Traversal via Symlink Resolution | HIGH | 7.1 | — | Microsoft | 2026-08-11 |
| CVE-2026-84243 | The gettext family of functions in the GNU C Library version 2.0 and later accept LANGUAGE environment variable entries | HIGH | 7.0 | 22%ile | NVD | 2026-10-30 |
| CVE-2026-62965 | SABnzbd is an open source automated Usenet download tool. Prior to 5.1.0Beta3, orphan-job management in `sabnzbd/api.py` | HIGH | 7.0 | 27%ile | NVD | 2026-10-30 |
| CVE-2026-116800 | WWBN AVideo before 29.5.0 contains a local file inclusion vulnerability that allows unauthenticated attackers to include | MEDIUM | 6.9 | 43%ile | NVD | 2026-10-27 |
| CVE-2026-116822 | YesWiki before 4.7.0 contains a path traversal vulnerability in BazarListeAction that allows unauthenticated attackers t | MEDIUM | 6.9 | 11%ile | NVD | 2026-10-27 |
| CVE-2026-117566 | EasyImages2.0 through 2.8.6 contains an unauthenticated path traversal vulnerability in app/down.php, app/thumb.php and | MEDIUM | 6.9 | 29%ile | NVD | 2026-10-27 |
| CVE-2026-113692 | Path traversal in the SmartIT file-management feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and | MEDIUM | 6.9 | 41%ile | NVD | 2026-10-29 |
| CVE-2026-86383 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2025 release versions 8.3.1.0 through 8. | MEDIUM | 6.8 | 40%ile | NVD | 2026-10-28 |
| CVE-2026-119546 | Forgejo through 15.0.11, 16.0.0 through 16.0.7, and 17.0.0 through 17.0.1 contains a path traversal vulnerability in res | MEDIUM | 6.8 | 4%ile | NVD | 2026-10-30 |
| CVE-2026-118756 | gopass before 1.17.0 contains a path traversal vulnerability in the filesystem storage backend that allows attackers to | MEDIUM | 6.7 | 4%ile | NVD | 2026-10-28 |
| CVE-2026-115923 | Backstage is an open framework for building developer portals. Prior to 3.9.2 and from 4.0.0 until 4.0.2, DefaultCatalog | MEDIUM | 6.5 | 25%ile | NVD | 2026-10-26 |
| CVE-2026-68866 | PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1 | MEDIUM | 6.5 | 13%ile | NVD | 2026-10-27 |
| CVE-2026-105457 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in HAVELSAN Inc. Liman MYS | MEDIUM | 6.5 | 37%ile | NVD | 2026-10-28 |
| CVE-2026-104309 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitive information due to | MEDIUM | 6.5 | 49%ile | NVD | 2026-10-29 |
| CVE-2026-110190 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on the system. An attack | MEDIUM | 6.5 | 36%ile | NVD | 2026-10-29 |
| CVE-2026-77819 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbitrary files due to im | MEDIUM | 6.5 | 30%ile | NVD | 2026-10-29 |
| CVE-2026-119328 | Immich is a high-performance self-hosted photo and video management solution. Prior to 3.3.0, the unauthenticated machin | MEDIUM | 6.5 | 38%ile | NVD | 2026-10-30 |
| CVE-2026-119480 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Crocoblock JetFormBuilde | MEDIUM | 6.5 | 35%ile | NVD | 2026-11-01 |
| CVE-2026-19444 | Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes | MEDIUM | 6.5 | 14%ile | Microsoft | 2026-09-08 |
| CVE-2026-102991 | Mako: Path traversal via drive-letter URI on Windows in TemplateLookup | MEDIUM | 6.5 | 29%ile | Microsoft | 2026-09-08 |
| CVE-2026-113576 | Adobe Digital Editions is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | MEDIUM | 6.3 | 12%ile | NVD | 2026-10-29 |
| CVE-2026-120204 | DeepInfer through 0.1.0 contains a path traversal vulnerability in the unauthenticated /profile endpoint that allows rem | MEDIUM | 6.3 | 37%ile | NVD | 2026-10-31 |
| CVE-2026-61725 | sevenz-rust2 is a Rust-native 7z compressor and `decompress`or. Prior to 0.21.1, extracting an attacker-supplied 7z arch | MEDIUM | 6.1 | 3%ile | NVD | 2026-10-30 |
| CVE-2026-91903 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Direc | MEDIUM | 6.1 | — | NVD | 2026-11-02 |
| CVE-2026-91911 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Direc | MEDIUM | 6.1 | — | NVD | 2026-11-02 |
| CVE-2026-90726 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7 | MEDIUM | 6.0 | 2%ile | NVD | 2026-10-27 |
| CVE-2026-108140 | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backe | MEDIUM | 5.9 | 29%ile | NVD | 2026-10-27 |
| CVE-2026-108141 | A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backe | MEDIUM | 5.9 | 29%ile | NVD | 2026-10-27 |
| CVE-2026-118680 | SiYuan 3.8.7 through 3.8.8 fails to normalize Windows GLOBALROOT device-namespace aliases, bypassing the IsSensitivePath | MEDIUM | 5.9 | 40%ile | NVD | 2026-10-28 |
| CVE-2026-118654 | Echo is a Go web framework. Prior to 4.16.0 and 5.4.0, Echo's static file handlers can normalize dot segments after rout | MEDIUM | 5.9 | 28%ile | NVD | 2026-10-28 |
| CVE-2026-120214 | @fastify/http-proxy is a Fastify plugin that proxies HTTP requests to an upstream server under a configured prefix. In v | MEDIUM | 5.9 | — | NVD | 2026-11-02 |
| CVE-2026-58015 | Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive | MEDIUM | 5.9 | 58%ile | Microsoft | 2026-06-09 |
| CVE-2026-91910 | Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Improper Limitation of a Pathname to a Restricted Direc | MEDIUM | 5.7 | — | NVD | 2026-11-02 |
| CVE-2026-118693 | CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::_create_image_from_xml that trus | MEDIUM | 5.6 | 3%ile | NVD | 2026-10-28 |
| CVE-2026-116602 | A vulnerability was detected in SourceCodester Online Food Ordering System 1.0. This issue affects the function unlink o | MEDIUM | 5.5 | 41%ile | NVD | 2026-10-26 |
| CVE-2026-118599 | A file overwrite vulnerability exists in Epiphany when installing WebExtension packages from .xpi files. In src/webexte | MEDIUM | 5.5 | 8%ile | NVD | 2026-10-31 |
| CVE-2026-120324 | A weakness has been identified in Aklivity Zilla up to 1.3.4/2.4.7/2.5.0-rc2. The affected element is the function Path. | MEDIUM | 5.5 | — | NVD | 2026-11-02 |
| CVE-2026-64400 | ksmbd: prevent path traversal bypass by restricting caseless retry | MEDIUM | 5.5 | 51%ile | Microsoft | 2026-07-14 |
| CVE-2026-75520 | Domoticz is a free, open source home automation system for Linux, Windows, macOS, and Raspberry Pi. Prior to 2026.3, the | MEDIUM | 5.4 | 20%ile | NVD | 2026-10-28 |
| CVE-2026-110251 | The Photo Reviews for WooCommerce plugin for WordPress is vulnerable to unauthorized Media Library File Deletion in all | MEDIUM | 5.4 | 25%ile | NVD | 2026-10-31 |
| CVE-2026-86388 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7 | MEDIUM | 5.3 | 24%ile | NVD | 2026-10-28 |
| CVE-2026-80067 | MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Sub | MEDIUM | 5.3 | 48%ile | NVD | 2026-10-29 |
| CVE-2026-90871 | Improper limitation of a pathname to a restricted directory in Progress Software WS_FTP Server versions prior to 2024.0. | MEDIUM | 5.3 | 18%ile | NVD | 2026-10-29 |
| CVE-2026-119342 | Stirling-PDF is a locally hosted web application that facilitates various operations on PDF files. From 2.13.1 until 2.1 | MEDIUM | 5.3 | 38%ile | NVD | 2026-10-30 |
| CVE-2026-120210 | FFmpeg 5.0 through 9.0.2 contains a path traversal vulnerability in the IMF demuxer that allows attackers to open files | MEDIUM | 5.3 | 20%ile | NVD | 2026-10-31 |
| CVE-2026-19585 | Go-getter vulnerable to a path traversal in S3/GCS directory download handling | MEDIUM | 5.3 | 11%ile | Microsoft | 2026-10-13 |
| CVE-2026-115604 | Subscriber Arbitrary File Deletion in SureDash <= 1.12.3 versions. | MEDIUM | 5.0 | 37%ile | NVD | 2026-10-30 |
| CVE-2026-104743 | The Tainacan plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.3.0 via t | MEDIUM | 4.9 | 58%ile | NVD | 2026-10-28 |
| CVE-2026-104739 | The JS Help Desk – AI-Powered Support & Ticketing System plugin for WordPress is vulnerable to arbitrary file deletion d | MEDIUM | 4.9 | 56%ile | NVD | 2026-10-30 |
| CVE-2026-118667 | LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs fro | MEDIUM | 4.3 | 34%ile | NVD | 2026-10-28 |
| CVE-2026-53584 | libgit2: Submodule path traversal | MEDIUM | 4.3 | 26%ile | Microsoft | 2026-08-11 |
| CVE-2026-107745 | The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to limited media file d | MEDIUM | 4.2 | 25%ile | NVD | 2026-10-28 |
| CVE-2026-90727 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7 | LOW | 3.8 | 18%ile | NVD | 2026-10-27 |
| CVE-2026-104312 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive co | LOW | 3.5 | 16%ile | NVD | 2026-10-29 |
| CVE-2026-90721 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7 | LOW | 3.4 | 2%ile | NVD | 2026-10-28 |
| CVE-2026-116673 | systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) im | LOW | 3.3 | 2%ile | NVD | 2026-10-27 |
| CVE-2026-93571 | Szafir is vulnerable to Path Traversal in the uploaded filename. A man-in-the-middle attacker who can reroute update req | LOW | 2.3 | 8%ile | NVD | 2026-10-29 |
| CVE-2026-117509 | A vulnerability was detected in crownpku Rasa_NLU_Chi up to 0.12.2. Affected is the function Persistor._decompress of th | LOW | 2.1 | 35%ile | NVD | 2026-10-27 |
| CVE-2026-117510 | A flaw has been found in Dexmal Dexbotic up to 0.2.0. Affected by this vulnerability is the function load_pretrained_gr0 | LOW | 2.1 | 42%ile | NVD | 2026-10-27 |
| CVE-2026-120325 | A security vulnerability has been detected in Webpro-nl Knip up to 6.44.0. The impacted element is the function writeFil | LOW | 2.1 | — | NVD | 2026-11-02 |
| CVE-2026-120334 | A flaw has been found in deepset-ai farm up to 0.8.0. This impacts the function EmbeddingTokenizer.from_pretrained of th | LOW | 2.1 | — | NVD | 2026-11-02 |
| CVE-2026-120335 | A vulnerability has been found in deepset-ai farm up to 0.8.0. Affected is the function WordEmbedding_LM.load of the fil | LOW | 0.9 | — | NVD | 2026-11-02 |
| CVE-2026-84633 | A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. An app | UNKNOWN | — | 3%ile | NVD | 2026-10-26 |
| CVE-2026-86877 | A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27. A malic | UNKNOWN | — | 4%ile | NVD | 2026-10-26 |
| CVE-2026-117626 | Jenkins 2.587 and earlier, LTS 2.580.1 and earlier improperly identifies file paths attempting path traversal in the fil | UNKNOWN | — | 6%ile | NVD | 2026-10-28 |
| CVE-2026-51851 | modelscope agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:Fil | UNKNOWN | — | 16%ile | NVD | 2026-10-29 |
| CVE-2026-118561 | External Control of File Name or Path vulnerability in Drupal Single Content Sync allows Path Traversal. This issue affe | UNKNOWN | — | 4%ile | NVD | 2026-10-30 |
| CVE-2026-118988 | CallBackery versions before 0.60.1 for Perl let unauthenticated clients read the POD of any file via path traversal in t | UNKNOWN | — | 15%ile | NVD | 2026-10-30 |
| CVE-2026-78189 | WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the | UNKNOWN | — | 16%ile | NVD | 2026-10-31 |
| CVE-2026-64653 | GitHub CLI: Unescaped variable components in request URLs could allow path traversal | UNKNOWN | — | 44%ile | Microsoft | 2026-08-11 |
| CVE-2026-66484 | Path Traversal in GNU cpio | UNKNOWN | — | 9%ile | Microsoft | 2026-08-11 |
| CVE-2026-7774 | tarfile.data_filter path traversal bypass allows writing outside the extraction directory | UNKNOWN | — | 49%ile | Microsoft | 2026-06-09 |
| CVE-2026-44705 | tmp: Path Traversal via unsanitized prefix/postfix enables directory escape | UNKNOWN | — | 38%ile | Microsoft | 2026-06-09 |
| CVE-2026-44307 | Mako: Path traversal via backslash URI on Windows in TemplateLookup | UNKNOWN | — | 55%ile | Microsoft | 2026-05-12 |
| CVE-2026-13346 | pip absolute path traversal during download from malicious package indexes | UNKNOWN | — | 22%ile | Microsoft | 2026-07-14 |
| FG-IR-26-180 | Arbitrary file write in grpc phQueryMaster | UNKNOWN | — | — | Fortinet | 2026-10-13 |
| FG-IR-26-175 | Improper limitation of a pathname to a restricted directory | UNKNOWN | — | — | Fortinet | 2026-10-01 |
| FG-IR-26-151 | Path traversal in CLI command allows deletion of root file system | UNKNOWN | — | — | Fortinet | 2026-07-14 |