CVE-2026-86087 is a medium severity vulnerability in IBM Db2 versions 11.5.0 through 11.5.9 and 12.1.0 through 12.1.5. It allows an authenticated user to send a specially crafted request that could write arbitrary files on the system due to improper limitation of a pathname to a restricted directory (path traversal). The vulnerability does not affect confidentiality or availability but impacts integrity. No patch information is provided in the input data.
An
authenticated directory traversal vulnerability in file upload functionality has
been identified in Archer MR600 (v2, v3 & v5) and TL-MR6400 v8. Due to insufficient validation of user-supplied file
information, an authenticated remote attacker with access to the affected
upload functionality could upload a specially crafted file and cause it to be
written outside the intended directory.
Successful
exploitation could allow an authenticated remote attacker to write files to
unintended locations, potentially overwriting or modifying files
accessible to the affected service; arbitrary code execution has not
been demonstrated.
CVE-2026-81789 is a path traversal vulnerability in Studio Wombat's Advanced Product Fields Extended for WooCommerce plugin. It allows an attacker to improperly access files outside the intended restricted directory. The vulnerability affects versions up to 3.1.6. The CVSS score is 8.6, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impact on availability. No patch or remediation information is currently provided.
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GIS Informatics GisLab Laboratory Management System allows Path Traversal.
This issue affects GisLab Laboratory Management System: from 1.4.03 before 1.5.
A path traversal vulnerability exists in the SP Property extension for Joomla versions 1.0.0 through 4.1.3. The flaw is due to improper limitation of a pathname to a restricted directory in the gallery image management controller, which lacks directory confinement checks. This vulnerability was assigned CVE-2026-78085 and has a medium severity rating with a CVSS 4.0 score of 6.9.
The Direct Download for WooCommerce plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.19 via the (top-level include) function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information. The product ownership check only verifies that some free, virtual, downloadable product exists on the site — not that the requested file path belongs to that product's configured downloads — making exploitation viable on any WooCommerce site with at least one such product.
The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backup_file' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. The basename() normalization present in the handler only executes when the traversed target path does not exist, providing no protection against reads of existing files.
Pandora-analysis pandora versions up to 1.12.7 contain a critical path traversal vulnerability in the archive extraction worker. This flaw allows an attacker submitting a malicious archive or disk image to cause files to be extracted outside the intended directory, potentially overwriting system or application files. Exploitation could lead to unauthorized file modification, denial of service, or further system compromise depending on the Pandora process permissions. The vulnerability is addressed by validating resolved extraction paths to ensure they remain within the designated directory and rejecting attempts that traverse outside.
A path traversal vulnerability exists in rattler_cache prior to version 0.9.0 and py-rattler prior to version 0.24.0. This flaw allows a malicious or untrusted conda channel to craft package metadata with path traversal components in the build string, causing package contents to be written outside the intended cache directory. Curated channels that validate metadata are not expected to allow such malformed build strings. Users should upgrade to fixed versions to mitigate this issue.
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access
A path traversal vulnerability (CWE-22) exists in the NTP configuration module of OPNsense core prior to version 26.1.9 and BE/opnsense/core prior to 26.4_20. This flaw allows an attacker with access to the NTP configuration and high privileges to overwrite arbitrary files on the system as root by manipulating GPS or PPS serial port parameters. The vulnerability is patched in versions 26.1.9 and 26.4_20 respectively.
CVE-2026-86079 is a path traversal vulnerability in the n8n workflow automation platform affecting Elasticsearch and ElasticSecurity nodes. Prior to versions 1.123.76, 2.37.7, and 2.38.2, these nodes interpolated workflow-controlled identifiers directly into REST request paths without proper encoding. This allowed an attacker to craft identifiers with path separators or dot segments to access unauthorized indices or cluster administration endpoints using stored Elasticsearch credentials. The vulnerability is fixed in versions 1.123.76, 2.37.7, and 2.38.2.
n8n is an open source workflow automation platform. Prior to 1.123.76, 2.37.7, and 2.38.2, the Git node validated the repository parameter for fetch or pull, but setUpstream wrote a branch..remote value into repository configuration without validating it. A later fetch or pull resolved the remote from that configuration instead of the checked parameter. An authenticated workflow editor could therefore point Git at any local repository readable by the n8n process and receive its contents through packages/nodes-base/nodes/Git/GenericFunctions.ts. This issue is fixed in versions 1.123.76, 2.37.7 and 2.38.2.
Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. An attacker with high privileges could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions, causing a limited disruption to availability. Exploitation of this issue does not require user interaction. Scope is changed.
Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to access unauthorized files or directories outside the intended restrictions. Exploit depends on conditions beyond the attacker's control. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
CVE-2026-69807 is a path traversal vulnerability in Windows PowerShell on Microsoft Windows 10 Version 1607 and related versions. It allows an authorized attacker to elevate privileges over a network by improperly limiting pathname access to restricted directories. The vulnerability has a high severity with a CVSS score of 8.0. Official fixes have been released for affected versions.
CVE-2026-69445 is a path traversal vulnerability in Windows Compressed Folder on Microsoft Windows 10 Version 1607 and related builds. It allows an authorized local attacker to elevate privileges by improperly limiting pathname access to restricted directories. The vulnerability affects multiple Windows 10 builds prior to specific fixed versions. A high-severity CVSS 3.1 score of 7.8 reflects its impact on confidentiality, integrity, and availability. Microsoft has issued official fixes for all affected versions.
CVE-2026-81377 is a path traversal vulnerability in Microsoft Visual Studio Code that allows an unauthorized attacker to tamper with files over a network. The flaw exists due to improper limitation of pathnames to restricted directories. It affects versions from 1.0.0 up to but not including 1.136.2. The vulnerability has a medium severity with a CVSS score of 6.5. An official fix is available in version 1.136.2.
CVE-2026-78461 is a path traversal vulnerability in Microsoft Visual Studio Code that allows an unauthorized attacker to bypass security restrictions over a network. The flaw exists due to improper limitation of pathnames to restricted directories. This vulnerability affects Visual Studio Code versions from 1.0.0 up to but not including 1.136.2. A fix is available in version 1.136.2. The vulnerability has a high severity rating with a CVSS score of 7.4.
CVE-2026-62801 is a path traversal vulnerability in Windows PowerShell on Microsoft Windows 10 Version 1607 and related builds. It allows an unauthorized attacker to bypass security restrictions over a network by improperly limiting pathname access. The vulnerability has been assigned a CVSS v3.1 score of 6.5 (medium severity). Official patches addressing this issue have been released by Microsoft.