Skip to main content

CWE-35

Path Traversal: '.../...//'

158 CVEs Avg CVSS 7.1 MITRE
17
CRITICAL
74
HIGH
63
MEDIUM
3
LOW
5
POC
1
KEV

Monthly

CVE-2026-59909 HIGH PATCH This Week

Path traversal in Dell ObjectScale (versions prior to 4.3.0.1) enables a local low-privileged attacker to write to or corrupt files outside intended directory boundaries, achieving high integrity and availability impact without requiring user interaction. The CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) confirms exploitation requires only a local account with minimal privilege - no elevated rights or user interaction needed. No public exploit code or CISA KEV listing has been identified at time of analysis; risk is primarily from insider threats or attacker-controlled service accounts in post-compromise scenarios.

Path Traversal Dell Objectscale
NVD
CVSS 3.1
7.1
EPSS
0.1%
CVE-2026-56089 LOW PATCH Monitor

Path traversal in Dell ObjectScale before version 4.3.0.1 enables a local, low-privileged attacker to read files outside the intended directory scope, resulting in partial information disclosure. The CVSS 3.3 (Low) score reflects the constrained attack surface - local authenticated access and an existing low-privileged account are prerequisites, and impact is limited to confidentiality with no integrity or availability consequence. No public exploit code or active exploitation has been identified at time of analysis.

Information Disclosure Path Traversal Dell Objectscale
NVD
CVSS 3.1
3.3
EPSS
0.1%
CVE-2026-28157 HIGH This Week

Path traversal in the Do Lasso WordPress plugin (versions <= 358) allows authenticated subscribers to traverse the server file system beyond the intended directory scope, achieving high confidentiality, integrity, and availability impact. The vulnerability is exploitable by any authenticated WordPress user holding the subscriber role - the lowest privilege tier - over the network, making it accessible to any registered site user. No public exploit code has been identified at time of analysis, and no CISA KEV listing exists, but the Patchstack advisory signals a patched version is available.

Path Traversal Do Lasso
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2026-69109 HIGH CISA Act Now

Unauthenticated arbitrary file read in Siemens License Server (SLS) versions prior to V5.3 allows remote attackers to traverse the filesystem and access sensitive files without any credentials. The root cause is missing sanitization of user-supplied path input (CWE-35), and the CVSS 4.0 score of 8.7 reflects network-exploitable access with no authentication or user interaction required and high confidentiality impact. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the attack complexity is low and the attack surface is any network-reachable SLS instance.

Siemens Path Traversal Siemens License Server Sls
NVD
CVSS 4.0
8.7
EPSS
0.5%
CVE-2026-13716 CRITICAL Act Now

Remote code execution in Crafty Controller (crafty-4), a web-based management panel for Minecraft servers, arises from path traversal in the server-import and admin file-upload features that lets an authenticated user write files to arbitrary filesystem paths accessible to the application. By planting a file in an executable or auto-loaded location, a low-privileged authenticated attacker can escalate to code execution in the context of the Crafty Controller process. No public exploit has been identified at the time of analysis, and the issue is not listed in CISA KEV; EPSS data was not provided.

File Upload Path Traversal RCE Crafty Controller
NVD
CVSS 3.1
9.1
EPSS
0.6%
CVE-2026-59115 CRITICAL NEWS HOSTED Monitor

Privilege escalation in the Microsoft Entra Provisioning Service (SyncFabric) allows an already-authorized, low-privileged network attacker to elevate privileges via a path-traversal sequence ('.../...//'), with a scope change (S:C) that lets impact cross into other security domains such as the underlying identity/provisioning tenant. Rated CVSS 9.9, the flaw yields high confidentiality, integrity, and availability impact and requires no user interaction. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the near-maximum score and low attack complexity make it a high-priority issue for the affected cloud service.

Information Disclosure Microsoft Entra Provisioning Service
NVD VulDB
CVSS 3.1
9.9
EPSS
0.6%
CVE-2026-66695 MEDIUM This Month

Path traversal in W3 Total Cache WordPress plugin (versions ≤ 2.10.2) enables remote unauthenticated attackers to manipulate files outside the intended cache directory without any credentials or user interaction. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms zero-barrier network exploitation; the C:N/I:L/A:L impact profile indicates this traversal affects file integrity and availability rather than exposing arbitrary file reads, suggesting a write- or delete-capable traversal rather than a classic information-disclosure variant. No public exploit code and no CISA KEV listing are identified at time of analysis.

Path Traversal W3 Total Cache
NVD
CVSS 3.1
6.5
EPSS
0.3%
CVE-2025-59181 MEDIUM PATCH This Month

Directory traversal in Ericsson Packet Core Controller (PCC) Configuration Management allows authenticated attackers with high privileges to alter directory permissions, causing denial of service to legitimate users. The vulnerability affects PCC versions prior to 1.39 and requires adjacent network access. No public exploit or active exploitation (KEV) has been reported, and the CVSS 4.0 medium score (4.8) reflects the limited impact and prerequisites.

Path Traversal Ericsson Packet Core Controller Pcc
NVD
CVSS 4.0
4.8
EPSS
0.3%
CVE-2025-60835 HIGH This Week

Path traversal in IZArc v4.6's unrar.dll component enables arbitrary file writes outside the intended extraction directory when a victim extracts a maliciously crafted RAR archive. The vulnerability stems from insufficient path validation in the RAR extraction routine, permitting an attacker-controlled archive to place files at attacker-chosen filesystem paths with the victim user's privileges. No public exploit identified at time of analysis and EPSS sits at 0.21% (11th percentile), but SSVC rates technical impact as total, reflecting the high-C/I/A CVSS score if the attack chain completes.

Path Traversal N A
NVD GitHub
CVSS 3.1
7.8
EPSS
0.2%
CVE-2026-49779 MEDIUM This Month

Path traversal in the Tax Exempt for WooCommerce plugin (versions <= 1.9.3) by Addify enables authenticated customer-level users to read arbitrary files from the server's filesystem. The vulnerability carries a CVSS 6.5 Medium score with high confidentiality impact, as a low-privileged account (a standard customer/shopper) can traverse directory boundaries to access sensitive files such as wp-config.php containing database credentials. No public exploit code or active CISA KEV listing has been identified at time of analysis.

WordPress Path Traversal Tax Exempt For Woocommerce
NVD VulDB
CVSS 3.1
6.5
EPSS
0.3%
EPSS 0% CVSS 7.1
HIGH PATCH This Week

Path traversal in Dell ObjectScale (versions prior to 4.3.0.1) enables a local low-privileged attacker to write to or corrupt files outside intended directory boundaries, achieving high integrity and availability impact without requiring user interaction. The CVSS vector (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) confirms exploitation requires only a local account with minimal privilege - no elevated rights or user interaction needed. No public exploit code or CISA KEV listing has been identified at time of analysis; risk is primarily from insider threats or attacker-controlled service accounts in post-compromise scenarios.

Path Traversal Dell Objectscale
NVD
EPSS 0% CVSS 3.3
LOW PATCH Monitor

Path traversal in Dell ObjectScale before version 4.3.0.1 enables a local, low-privileged attacker to read files outside the intended directory scope, resulting in partial information disclosure. The CVSS 3.3 (Low) score reflects the constrained attack surface - local authenticated access and an existing low-privileged account are prerequisites, and impact is limited to confidentiality with no integrity or availability consequence. No public exploit code or active exploitation has been identified at time of analysis.

Information Disclosure Path Traversal Dell +1
NVD
EPSS 0% CVSS 7.5
HIGH This Week

Path traversal in the Do Lasso WordPress plugin (versions <= 358) allows authenticated subscribers to traverse the server file system beyond the intended directory scope, achieving high confidentiality, integrity, and availability impact. The vulnerability is exploitable by any authenticated WordPress user holding the subscriber role - the lowest privilege tier - over the network, making it accessible to any registered site user. No public exploit code has been identified at time of analysis, and no CISA KEV listing exists, but the Patchstack advisory signals a patched version is available.

Path Traversal Do Lasso
NVD
EPSS 0% CVSS 8.7
HIGH Act Now

Unauthenticated arbitrary file read in Siemens License Server (SLS) versions prior to V5.3 allows remote attackers to traverse the filesystem and access sensitive files without any credentials. The root cause is missing sanitization of user-supplied path input (CWE-35), and the CVSS 4.0 score of 8.7 reflects network-exploitable access with no authentication or user interaction required and high confidentiality impact. No public exploit code or active exploitation (CISA KEV) has been identified at time of analysis, but the attack complexity is low and the attack surface is any network-reachable SLS instance.

Siemens Path Traversal Siemens License Server Sls
NVD
EPSS 1% CVSS 9.1
CRITICAL Act Now

Remote code execution in Crafty Controller (crafty-4), a web-based management panel for Minecraft servers, arises from path traversal in the server-import and admin file-upload features that lets an authenticated user write files to arbitrary filesystem paths accessible to the application. By planting a file in an executable or auto-loaded location, a low-privileged authenticated attacker can escalate to code execution in the context of the Crafty Controller process. No public exploit has been identified at the time of analysis, and the issue is not listed in CISA KEV; EPSS data was not provided.

File Upload Path Traversal RCE +1
NVD
EPSS 1% CVSS 9.9
CRITICAL HOSTED Monitor

Privilege escalation in the Microsoft Entra Provisioning Service (SyncFabric) allows an already-authorized, low-privileged network attacker to elevate privileges via a path-traversal sequence ('.../...//'), with a scope change (S:C) that lets impact cross into other security domains such as the underlying identity/provisioning tenant. Rated CVSS 9.9, the flaw yields high confidentiality, integrity, and availability impact and requires no user interaction. There is no public exploit identified at time of analysis and it is not listed in CISA KEV, but the near-maximum score and low attack complexity make it a high-priority issue for the affected cloud service.

Information Disclosure Microsoft Entra Provisioning Service
NVD VulDB
EPSS 0% CVSS 6.5
MEDIUM This Month

Path traversal in W3 Total Cache WordPress plugin (versions ≤ 2.10.2) enables remote unauthenticated attackers to manipulate files outside the intended cache directory without any credentials or user interaction. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms zero-barrier network exploitation; the C:N/I:L/A:L impact profile indicates this traversal affects file integrity and availability rather than exposing arbitrary file reads, suggesting a write- or delete-capable traversal rather than a classic information-disclosure variant. No public exploit code and no CISA KEV listing are identified at time of analysis.

Path Traversal W3 Total Cache
NVD
EPSS 0% CVSS 4.8
MEDIUM PATCH This Month

Directory traversal in Ericsson Packet Core Controller (PCC) Configuration Management allows authenticated attackers with high privileges to alter directory permissions, causing denial of service to legitimate users. The vulnerability affects PCC versions prior to 1.39 and requires adjacent network access. No public exploit or active exploitation (KEV) has been reported, and the CVSS 4.0 medium score (4.8) reflects the limited impact and prerequisites.

Path Traversal Ericsson Packet Core Controller Pcc
NVD
EPSS 0% CVSS 7.8
HIGH This Week

Path traversal in IZArc v4.6's unrar.dll component enables arbitrary file writes outside the intended extraction directory when a victim extracts a maliciously crafted RAR archive. The vulnerability stems from insufficient path validation in the RAR extraction routine, permitting an attacker-controlled archive to place files at attacker-chosen filesystem paths with the victim user's privileges. No public exploit identified at time of analysis and EPSS sits at 0.21% (11th percentile), but SSVC rates technical impact as total, reflecting the high-C/I/A CVSS score if the attack chain completes.

Path Traversal N A
NVD GitHub
EPSS 0% CVSS 6.5
MEDIUM This Month

Path traversal in the Tax Exempt for WooCommerce plugin (versions <= 1.9.3) by Addify enables authenticated customer-level users to read arbitrary files from the server's filesystem. The vulnerability carries a CVSS 6.5 Medium score with high confidentiality impact, as a low-privileged account (a standard customer/shopper) can traverse directory boundaries to access sensitive files such as wp-config.php containing database credentials. No public exploit code or active CISA KEV listing has been identified at time of analysis.

WordPress Path Traversal Tax Exempt For Woocommerce
NVD VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy