CWE-35 vulnerabilities

CVE-2026-66695 is a medium severity unauthenticated path traversal vulnerability affecting BoldGrid's W3 Total Cache plugin versions up to and including 2.10.2. The flaw allows an attacker to perform path traversal using sequences like '.../...//', potentially leading to limited integrity and availability impacts. No official patch or remediation guidance has been provided yet, and no known exploits are reported in the wild.

Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users.

Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows local privileged attackers to access files with system server privilege.

Path Traversal: '.../...//' vulnerability in Addify Tax Exempt for WooCommerce allows Path Traversal. This issue affects Tax Exempt for WooCommerce: from n/a before 1.9.5.

CVE-2026-52707 is a high-severity vulnerability in Mikado-Themes Kastell versions up to and including 2.0. It allows unauthenticated attackers to perform local file inclusion via a path traversal flaw. This can lead to full confidentiality, integrity, and availability compromise of the affected system. No official patch or remediation guidance is currently available from the vendor.

Unauthenticated Path Traversal in FastDup <= 2.7.2 versions.

CVE-2026-49112 is a high-severity unauthenticated path traversal vulnerability affecting Tammersoft Shared Files versions up to and including 1.7.64. This vulnerability allows an attacker to access files outside the intended directory by exploiting path traversal sequences such as '.../...//'. The vulnerability does not require authentication and impacts confidentiality without affecting integrity or availability.

A path traversal vulnerability (CWE-35) exists in WP Customer Area versions up to and including 8.3.4. This vulnerability allows a user with limited privileges to exploit custom role functionality to perform path traversal attacks. The vulnerability has a high severity with a CVSS score of 8.8, indicating it can lead to high impact on confidentiality, integrity, and availability.

CVE-2026-40128 is a critical path traversal vulnerability in SAP NetWeaver Application Server Java (Web Container). It allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file inclusion parameters. This manipulation enables the attacker to traverse directories and process arbitrary files on the local system. Successful exploitation could lead to viewing or modifying sensitive information or causing denial of service by making parts of the system unavailable.

CVE-2026-24315 is a path traversal vulnerability in SAP Fiori Launchpad that allows attackers to craft malicious URLs triggering arbitrary service calls. Exploitation requires advanced system knowledge and user interaction. The vulnerability impacts confidentiality and integrity at a low level, with no effect on availability. The CVSS score is 4.2, indicating medium severity. No official patch or remediation guidance is currently available from the vendor.

CVE-2026-44933 is a path traversal vulnerability in SUSE Linux Enterprise where the PluginScript attempts to chroot to a root directory that is often the system root (/). When the chroot target is /, the operation is ineffective, allowing traversal paths to execute host binaries with root privileges. This vulnerability has a high severity score of 7.8 and affects version 17.38.8. No patch or official remediation information is currently available, and no known exploits are reported in the wild.

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2026-42930 is a high-severity vulnerability in F5 BIG-IP systems running in Appliance mode. It allows an authenticated attacker with the 'Administrator' role to bypass Appliance mode restrictions by exploiting a path traversal issue (CWE-35). This vulnerability affects multiple BIG-IP versions including 21.0.0, 17.5.0, 17.1.0, and 16.1.

When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator role privileges to cross a security boundary and delete files.  Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.

CVE-2026-25705 is a high-severity path traversal vulnerability in SUSE Rancher's Extensions component. It allows a malicious UI extension to inject code by exploiting the compressedEndpoint field in a UIPlugin deployment. Successful exploitation can lead to overwriting Rancher binaries or configurations, tampering with cluster state, writing to the host filesystem if hostPath volumes are mounted, and chaining with other attack vectors. The vulnerability affects Rancher versions 2.10.11, 2.12.0, 2.13.0, and 2.

An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application.

Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall performs rule matching on the raw (non-normalized) request path, while downstream components may normalize dot-segments according to RFC 3986, Section 6.2.2.3. This discrepancy can result in heimdall authorizing a request for one path (e.g., /user/../admin, or URL-encoded variants such as /user/%2e%2e/admin or /user/%2e%2e%2fadmin. The latter would require the allow_encoded_slashes option to be set to on or no_decode.) while the downstream ultimately processes a different, normalized path (/admin). This issue has been patched in version 0.17.14.

A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.

Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerability in the download_debuglog_file.php endpoint used for Debug Logs downloads. An unauthenticated attacker can manipulate the name parameter to read arbitrary files outside the intended directory.

CVE-2026-28265 is a path traversal vulnerability in Dell PowerStore affecting the Service user. A low privileged attacker with local access could exploit this flaw to modify arbitrary system files. The vulnerability has a medium severity with a CVSS score of 4.4. There is no information about available patches or vendor advisories indicating remediation status. No known exploits in the wild have been reported.