Satel Netco Design versions prior to 2.1.7 contain a relative path traversal vulnerability in the data export functionality. An authenticated user with Viewer privileges can exploit this flaw to write attacker-controlled content to file system locations accessible by the application. This may lead to unauthorized file creation or modification and, under certain conditions, arbitrary code execution. The vulnerability has a high severity with a CVSS score of 8.7. No official patch links are provided in the input data.
CVE-2026-90466 is a relative path traversal vulnerability in Apache Impala versions 4.5.2 up to but not including 4.5.3. It allows an attacker to load a malicious JAR file via a relative path if the 'trusted_jar_paths' startup flag is configured with a non-empty value. The vulnerability is fixed in version 4.5.3.
CVE-2026-106552 is a medium severity vulnerability in OpenSSH before version 10.6. It involves a relative path traversal issue in the sftp component, which can be triggered by a server during a recursive copy operation, potentially causing files to be written to unintended locations.
Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-supplied SID over a local IPC named pipe.
CVE-2026-13224 is a path traversal vulnerability in the WatchGuard Fireware OS WebUI management agent. It allows an authenticated administrator to read or list arbitrary files on the local filesystem by sending a specially crafted management request. This vulnerability affects multiple versions of Fireware OS prior to their respective fixed releases. The issue has a high severity with a CVSS score of 8.2. Fixed versions are available, and users should upgrade to these versions to remediate the vulnerability.
CVE-2026-102252 is a path traversal vulnerability in Google OSV-SCALIBR's embedded VMDK filesystem extractor versions 0.3.6 through 0.5.0. This flaw allows an attacker controlling the scan target to write arbitrary files outside the intended extraction directory on the host system by exploiting insufficient validation of archive path entries in crafted VMDK images.
A directory traversal vulnerability in the file upload functionality of Hitachi Energy RTU500 end-of-life versions allows an unauthenticated attacker to write or overwrite arbitrary files on the device file system. Depending on the files affected, successful exploitation could result in unauthorized modification of device data or disruption of the device’s intended operation.
A user who can supply bundle content to a repository referenced by a GitRepo resource, for example through Git push access, or through permission to create or modify a GitRepo, can cause SUSE Rancher Fleet to read files from the filesystem of the environment that processes the bundle and include their contents in the generated Bundle resource. This can expose configuration or credential material that the user has no Kubernetes RBAC permission to read, including Helm registry credentials made available to the bundle-processing job when per-path Helm credentials are configured.
This affects Fleet 0.16 before 0.16.2, 0.15 before 0.15.7, 0.14 before 0.14.11, 0.13 before 0.13.16, 0.12 before 0.12.20 and potentially older unsupported versions.
The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files.
CVE-2026-55062 is a path traversal vulnerability in the uniget-org CLI tool prior to version 0.27.6. The vulnerability arises from the hooks edit command concatenating an unvalidated hook filename with the hooks directory path, allowing directory traversal outside the intended directory. This can lead to unauthorized file access or modification with the privileges of the uniget process. The issue is fixed in version 0.27.6.
GitHacker versions 1.1.7 and earlier contain a path traversal vulnerability in the add_head_file_tasks function. This flaw allows an attacker-controlled ref path from .git/HEAD to cause the tool to read arbitrary local files when run against a malicious server URL. Although full file contents are not disclosed, the vulnerability enables an existence oracle for certain hexadecimal fragments. The issue is fixed in version 1.1.9.
CVE-2026-89065 is a relative path traversal vulnerability in AWS projen versions before 0.101.37. It affects the generated file manifest cleanup component, allowing attackers to recursively delete files and directories outside the project directory if those files are writable by the environment running projen. The issue is fixed in version 0.101.37 by applying a corrected containment check during project synthesis.
CVE-2026-84939 is a critical path traversal vulnerability in Apache FreeMarker's template loading mechanism. It occurs when an attacker specifies a malformed locale identifier while localized lookup is enabled (enabled by default). This affects versions from 2.2.0 through 2.3.34. The vulnerability allows unauthorized reading of files within the constraints of the configured TemplateLoader. Users should upgrade to version 2.3.35 or disable localized lookup to mitigate the issue.
CVE-2026-15913 is a path traversal vulnerability in Fortra GoAnywhere MFT versions prior to 7.10.2. It affects the /attachRemoteFiles endpoint, allowing authenticated web users with Secure Folders and Secure Mail permissions to escape their sandboxed home directory and read arbitrary files. This vulnerability has a high severity score of 7.7 and impacts confidentiality but not integrity or availability.
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker.
The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files.
CVE-2026-47680 is a medium severity vulnerability in fluxcd source-controller versions 0.0.17 through 1.8.4. It allows an attacker who can influence a referenced bucket to cause the source-controller to write files outside its intended working directory. Additionally, from version 1.6.0 onward, a user with permission to create or update GitRepository resources can enumerate file paths on the controller pod via the sparse-checkout feature. The vulnerability was fixed in version 1.8.5. No in-product workaround exists, but admission policies can mitigate some attack vectors.
CVE-2026-77897 is a high-severity vulnerability in Microsoft Power Automate agent for virtual desktops that involves a relative path traversal flaw. This vulnerability allows an authorized local attacker to elevate privileges on the affected system. The issue affects versions from 1.0.0.0 up to but not including 2.71.115.26224. Microsoft has released an official fix in version 2.71.115.26224.
CVE-2026-72948 is a relative path traversal vulnerability in the Windows DNS component affecting Microsoft Windows 10 Version 1607 and related versions. It allows an authorized local attacker to elevate privileges. The vulnerability has a CVSS 3.1 base score of 6.7, indicating medium severity. An official fix is available from Microsoft.
CVE-2026-67367 is a high-severity vulnerability affecting multiple versions of Siemens SIMOVE Fleetmanager and SIPLANT products. The flaw is a relative path traversal in the embedded HTTP server's file-serving endpoint, allowing unauthenticated remote attackers to read arbitrary files on the underlying operating system. This can expose sensitive information such as credential stores, private keys, and configuration secrets. The vulnerability affects all versions prior to specific fixed releases in SIMOVE Fleetmanager V3.1, V3.2, V3.3, V4.0, and SIPLANT V3.1, as well as all versions of SIPLANT V1.7, V2.2, and V3.0. No known exploits in the wild have been reported, and no patch links were provided in the source data.