#Path Traversal
All CosmicBytez Labs articles tagged #Path Traversal, across news, security advisories, how-to guides, and projects.
- Security
CVE-2026-21589: Atlassian Multiple Products Files or Directories Accessible to External Parties Vulnerability
Pre-auth path traversal flaw (CVSS 9.3) exposes files in 8 Atlassian Data Center products; CISA confirms active exploitation.
- Security
CVE-2026-107935: gvproxy Path Traversal Allows Unauthenticated Host File Deletion
A critical gvproxy flaw (CVSS 9.3) lets attackers delete arbitrary host files via its unauthenticated /expose endpoint, breaking VM-host isolation.
- Security
CVE-2021-3199: ONLYOFFICE Docs Server Path Traversal Vulnerability
CISA added this 2021 ONLYOFFICE Docs path traversal (CVSS 9.8) to its KEV catalog on Oct 8, 2026, confirming active RCE exploitation.
- News
Dell Patches Critical Root-Privilege Flaw in System Update Tool
Dell fixed a critical CVSS 9.6 path traversal bug (CVE-2026-86360) in its System Update CLI that lets attackers run code as root on PowerEdge servers.
- Security
CVE-2026-105123: wcms Media Upload API Remote Code Execution
Authenticated wcms editors can abuse the media upload API to write .php files and traverse paths, achieving remote code execution.
- Security
Critical Path Traversal in Super Forms WordPress Plugin Exposes wp-config.php
A CVSS 9.1 unauthenticated path traversal flaw in the Super Forms WordPress plugin (≤ 6.3.316) lets attackers read wp-config.php and other sensitive files.
- Security
CVE-2026-82824: Critical Path Traversal in Hitachi Coding Software Suite
Critical CVSS 9.8 path traversal in Hitachi Coding Software Suite (≤ 3.3.0) lets attackers access, create, modify, or delete files on the host.
- Security
CVE-2026-78312: DIAEnergie Path Traversal Enables Unauthenticated File System Access
A critical unauthenticated path traversal (CVSS 9.1) in Delta Electronics DIAEnergie lets attackers write files outside the intended directory.
- Security
CVE-2026-96276: Flatpak build-init Path Traversal Enables Arbitrary File Writes
A malicious Flatpak SDK extension can abuse build-init path resolution to write attacker files outside the build tree.
- News
Maximum Severity GitLab Flaw Puts Supply Chains at Risk
CVE-2026-85706 (CVSS 10.0) lets unauthenticated attackers read arbitrary files via GitLab's commits API. Already actively exploited.
- News
GitLab's CVSS 10 File-Read Flaw Draws Probes Within Hours of Disclosure
CVE-2026-85706, a CVSS 10 GitLab path traversal, hit CISA's KEV catalog after watchTowr spotted active probing the same day it was patched.
- Security
CVE-2026-49846: libks clean_uri() Path Traversal
A high-severity path traversal flaw in libks's clean_uri() lets unauthenticated attackers read arbitrary files via long URI paths.
- Security
CVE-2026-89009: WAVLINK Router Unauthenticated Arbitrary File Write
WAVLINK WN535M1/WN535M3 routers let unauthenticated attackers overwrite any file on the device via the root sync_server daemon.
- Security
CVE-2026-85706: GitLab Path Traversal Flaw Hit CVSS 10.0, Added to CISA KEV
Unauthenticated attackers can read arbitrary files via GitLab's commits API. Exploited a day after disclosure; now in CISA's KEV catalog.
- Security
CVE-2026-71805: LZ-litchi Unauthenticated Arbitrary File Upload
LZ-litchi 1.0.0 lets unauthenticated attackers upload arbitrary files outside the storage directory via a path-traversal flaw in its upload API.
- Security
Cloud Commander Path Traversal Enables Arbitrary File Access (CVE-2026-82460)
CVE-2026-82460 (CVSS 9.8) lets attackers read, write, move, or copy files outside Cloud Commander's root via REST and markdown endpoints.
- Security
CVE-2026-66384: JFrog Artifactory Path Traversal Added to CISA KEV
CISA added CVE-2026-66384, a JFrog Artifactory Docker-cache path traversal flaw, to its KEV catalog after confirmed active exploitation.
- Security
CVE-2026-66897: Critical LXD Path Traversal Allows Host File Overwrite
A CVSS 9.9 path traversal flaw in LXD's template processing lets attackers with container permissions overwrite arbitrary host files.
- Security
CVE-2026-10053: GitLab CE/EE Path Traversal Enables Remote Code Execution
A path traversal flaw in GitLab's package registry allows authenticated users to achieve RCE. Affects versions 18.8 through 19.2.1.
- Security
CVE-2026-75627: Bastillion Authentication Bypass via Path Traversal
Bastillion's controller dispatcher fails to validate URI paths, letting unauthenticated attackers bypass auth filters and access administrative functions.
- Security
CVE-2026-18855: WordPress Link Library Plugin Arbitrary File Deletion
Critical CVSS 9.1 flaw in WordPress Link Library plugin allows unauthenticated attackers to delete arbitrary server files, risking full site takeover.
- Security
CVE-2026-14484: WordPress RapiSafe Plugin Arbitrary File Deletion
Critical unauthenticated arbitrary file deletion in WordPress RapiSafe plugin v1.0.4 and below allows attackers to delete any file on the server.
- Security
CVE-2026-17482: Critical RCE in IBM Documentation Offline
IBM Documentation Offline versions 1.0.0–1.4.1 contain a critical path traversal flaw allowing remote code execution with a CVSS score of 9.8.
- Security
CVE-2026-13716: Path Traversal RCE in Crafty Controller
A critical path traversal vulnerability in Crafty Controller allows authenticated remote attackers to upload files to arbitrary paths and achieve remote...
- Security
CVE-2026-19264: Critical Path Traversal in Postiz Exposes JWT Secrets and DB Credentials
A critical unauthenticated path traversal vulnerability in Postiz, the open-source social media scheduling platform, allows attackers to read arbitrary...
- Security
CVE-2026-15435: IBM App Connect Enterprise Path Traversal — Arbitrary File Write (CVSS 9.8)
Critical path traversal vulnerability in IBM App Connect Enterprise allows unauthenticated remote attackers to write arbitrary files on the system using...
- News
Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication
A high-severity path traversal vulnerability in the open-source developer platform Windmill (CVE-2026-29059, CVSS 7.5) is under active exploitation,...
- Security
CVE-2026-15265: Tenable Agent Path Traversal — Arbitrary File Write & RCE (CVSS 9.1)
A critical path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and earlier allows a privileged attacker to write arbitrary files outside the...
- News
Progress Confirms ShareFile Zero-Day Flaw Behind Storage Zone Shutdown
Progress Software has confirmed a high-severity path traversal zero-day vulnerability in ShareFile Storage Zone Controller triggered the emergency...
- Security
CVE-2026-56260: Crawl4AI Arbitrary File Write in Docker API
A critical CVSS 9.1 vulnerability in Crawl4AI before 0.8.7 allows attackers to write arbitrary files anywhere on the host filesystem via the Docker API's...
- Security
CVE-2026-61445: PraisonAI AICoder Arbitrary File Write and Command Injection via LLM Tool Calls
A CVSS 9.9 critical vulnerability in PraisonAI before 4.6.78 allows attackers to write files to arbitrary filesystem locations and execute arbitrary OS...
- Security
CVE-2026-59792: JetBrains IntelliJ IDEA Remote Code Execution via Path Traversal
A critical RCE vulnerability (CVSS 9.6) in JetBrains IntelliJ IDEA before 2026.1.4 allows code execution through path traversal in project workspace ID...
- Security
CVE-2026-53481: Dell PowerProtect Data Domain Path Traversal — CVSS 9.8
A critical path traversal vulnerability in Dell PowerProtect Data Domain backup appliances allows authenticated low-privilege users to read and write...
- Security
CVE-2026-24014: Apache IoTDB DataNode Path Traversal via Trigger JAR Upload
A critical path traversal vulnerability in Apache IoTDB's DataNode RPC interface allows unauthenticated attackers to write arbitrary files outside the...
- News
7 Unpatched Flaws Disclosed in FatFs Filesystem Used in Millions of Embedded Devices
Security firm runZero has disclosed seven vulnerabilities in FatFs, a widely used FAT/exFAT filesystem library embedded in cameras, drones, crypto...
- Security
CVE-2026-52830: fast-mcp-telegram Path Traversal Enables Bearer Token Bypass
A critical path traversal vulnerability in the fast-mcp-telegram Telegram MCP Server allows attackers to bypass Bearer token authentication and read...
- Security
CVE-2026-9725: Critical WordPress WooCommerce Plugin File Deletion
A CVSS 9.1 critical unauthenticated arbitrary file deletion vulnerability in the Printcart Web to Print Product Designer for WooCommerce plugin affects...
- Security
CVE-2026-14198: Fastify Middie Middleware Path Bypass (CVSS 9.1)
Critical path bypass vulnerability in @fastify/middie versions 9.1.0 through 9.3.2 allows attackers to evade middleware protection by exploiting a %2F...
- Security
CVE-2026-48282: Adobe ColdFusion Critical Path Traversal to RCE (CVSS 10.0)
Adobe ColdFusion contains a critical path traversal vulnerability (CWE-22) that enables unauthenticated remote code execution. The flaw is part of Adobe's...
- Security
CVE-2026-57331: Critical Arbitrary File Deletion in Paid Videochat Turnkey Site
A CVSS 9.9 critical vulnerability in the Paid Videochat Turnkey Site WordPress plugin allows authenticated performer-role users to delete arbitrary files...
- Security
CVE-2025-55017: Apache IoTDB Critical Path Traversal Vulnerability
Critical path traversal vulnerability (CVSS 9.1) in Apache IoTDB affects versions 1.0.0 through 1.3.5 and 2.0.0 through 2.0.5. Users must upgrade...
- Security
CVE-2025-64152: Apache IoTDB Second Critical Path Traversal Flaw
A second critical path traversal vulnerability (CVSS 9.1) in Apache IoTDB affects versions 1.0.0 through 1.3.5 and 2.0.0 through 2.0.6. Patch to 1.3.6 or...
- Security
CVE-2026-52884: Notepad++ Trusted Directory Bypass via Path Traversal (CVSS 7.8)
A path traversal flaw in Notepad++ v8.9.6.1 allows attackers to bypass the trusted directory plugin verification check using path sequences, potentially...
- Security
CVE-2026-54352: Budibase Zip Upload Path Traversal Enables Remote Code Execution (CVSS 9.6)
A critical path traversal vulnerability in Budibase's zip upload endpoint allows attackers to write arbitrary files outside the intended temp directory,...
- Security
CVE-2026-56445: DICOM qrscp Path Traversal Enables Arbitrary File Write
A critical path traversal vulnerability in the qrscp DICOM application allows unauthenticated attackers to write files to arbitrary server paths via...
- Security
CVE-2026-54414: FileRise Path Traversal Enables Arbitrary File Write and Admin Takeover
A critical path traversal vulnerability in FileRise before 3.16.0 allows unauthenticated attackers to write arbitrary files and completely compromise...
- Security
CVE-2026-20262: Cisco Catalyst SD-WAN Manager Path Traversal Vulnerability
Cisco Catalyst SD-WAN Manager contains a directory path traversal vulnerability allowing an authenticated remote attacker to create or overwrite any file...
- News
Path Traversal Flaw in AI Dev Platform Langflow Exploited in Attacks
Attackers are actively exploiting CVE-2026-5027, a high-severity path traversal vulnerability in Langflow, to write arbitrary files on exposed servers....
- Security
CVE-2026-34909 — UniFi OS Path Traversal Leading to Account
A CVSS 10.0 path traversal vulnerability in UniFi OS allows an unauthenticated network attacker to read arbitrary files, including sensitive account files...
- Security
CVE-2026-7302: SGLang Unauthenticated Path Traversal
A critical CVSS 9.1 path traversal vulnerability in SGLang's multimodal AI runtime allows unauthenticated attackers to write arbitrary files anywhere the...
- Security
CVE-2026-7381: Plack::Middleware::XSendfile
A critical CVSS 9.1 vulnerability in Plack::Middleware::XSendfile versions through 1.0053 allows remote attackers to control the X-Sendfile-Type header,...
- Security
CVE-2024-1708: ConnectWise ScreenConnect Path Traversal
ConnectWise ScreenConnect contains a path traversal vulnerability (CVE-2024-1708) that allows attackers to execute remote code or directly access...
- Security
CVE-2026-41228 — Froxlor Path Traversal via def_language
A critical path traversal vulnerability in Froxlor's Customers.update and Admins.update API endpoints allows authenticated low-privilege users to traverse...
- Security
CVE-2025-2749: Kentico Xperience Path Traversal
Kentico Xperience contains a path traversal vulnerability allowing an authenticated user's Staging Sync Server to upload arbitrary data to relative path...
- Security
CVE-2026-6568: KodExplorer Path Traversal in Public Share
A path traversal vulnerability in KodExplorer up to v4.52 allows remote attackers to read arbitrary files via the share.class.php Public Share Handler,...
- Security
CVE-2026-6057: FalkorDB Browser Unauthenticated Path
FalkorDB Browser 1.9.3 contains a critical unauthenticated path traversal vulnerability in its file upload API that allows remote attackers to write...
- Security
CVE-2026-35392: Critical Path Traversal in goshs Go HTTP
A critical CVSS 9.8 path traversal vulnerability in goshs, a SimpleHTTPServer written in Go, allows unauthenticated attackers to write arbitrary files via...
- Security
CVE-2025-15036: MLflow Path Traversal in Archive Extraction
A critical path traversal vulnerability in MLflow's extract_archive_to_dir function allows attackers to write arbitrary files outside the intended...
- Security
CVE-2026-33670: SiYuan readDir Path Traversal Notebook
A critical path traversal vulnerability in SiYuan's /api/file/readDir interface allows unauthenticated remote attackers to traverse notebook directories...
- Security
Critical CORS + Path Traversal in TinaCMS CLI Dev Server
A critical CVSS 9.6 vulnerability in TinaCMS prior to 2.1.8 combines a permissive CORS policy with a path traversal flaw, enabling a remote attacker to...
- Security
WinRAR Path Traversal Flaw CVE-2025-8088 Actively Exploited
Critical path traversal vulnerability in WinRAR enables ransomware and credential theft as Russian and Chinese threat actors weaponize phishing campaigns...