#Directory Traversal
All CosmicBytez Labs articles tagged #Directory Traversal, across news, security advisories, how-to guides, and projects.
- Security
Cloud Commander Path Traversal Enables Arbitrary File Access (CVE-2026-82460)
CVE-2026-82460 (CVSS 9.8) lets attackers read, write, move, or copy files outside Cloud Commander's root via REST and markdown endpoints.
- Security
CVE-2026-13339: CubeWP Framework WordPress Plugin Directory Traversal (CVSS 7.5)
A high-severity directory traversal vulnerability in the CubeWP Framework plugin for WordPress allows unauthenticated attackers to read arbitrary files on...
- Security
CVE-2026-18352: WordPress User Access Manager Directory Traversal
The User Access Manager plugin for WordPress (up to v2.3.15) is vulnerable to unauthenticated directory traversal via the 'uamgetfile' parameter, allowing...
- Security
CVE-2026-47871: VMware Avi Load Balancer Directory Traversal
A directory traversal vulnerability in VMware Avi Load Balancer allows authenticated network users to bypass file path validation and access arbitrary...
- Security
CVE-2026-48282: Adobe ColdFusion Critical Path Traversal to RCE (CVSS 10.0)
Adobe ColdFusion contains a critical path traversal vulnerability (CWE-22) that enables unauthenticated remote code execution. The flaw is part of Adobe's...
- Security
CVE-2026-34909 — UniFi OS Path Traversal Leading to Account
A CVSS 10.0 path traversal vulnerability in UniFi OS allows an unauthenticated network attacker to read arbitrary files, including sensitive account files...