CVE-2026-111053 is a path traversal vulnerability in FOSSBilling versions 0.1.0 through 0.8.6. The unauthenticated api/guest/system/template_exists endpoint improperly handles the file parameter, allowing attackers to submit traversal sequences to check for the existence of arbitrary files or directories on the server. This vulnerability does not disclose file contents. It is fixed in version 0.8.7.
CVE-2026-79986 is a path traversal vulnerability in the Apache Camel Azure Files component and other remote-file consumers. The flaw arises because the software concatenates directory paths with file names from remote listings without proper normalization or containment checks, allowing traversal outside the intended directory. This can lead to unauthorized reading, deletion, or renaming of files outside the configured polling directory using the endpoint's credentials. The vulnerability affects Apache Camel versions from 4.0.0 before 4.18.5 and from 4.19.0 before 4.22.1. Fixed versions are 4.18.5 and 4.22.1.
CVE-2026-79985 is a path traversal vulnerability in the Apache Camel SMB component affecting versions from 4.2.0 before 4.18.5 and from 4.19.0 before 4.22.1. The flaw allows an attacker controlling the remote server or an on-path attacker to manipulate directory listings to cause Apache Camel to access files outside the intended polling directory. This can lead to unauthorized file retrieval, deletion, or renaming using the endpoint's credentials. The vulnerability arises because Apache Camel does not properly normalize or validate remote file paths before performing operations. The issue is fixed in Apache Camel versions 4.18.5 and 4.22.1.
CVE-2026-79984 is a path traversal vulnerability in the Apache Camel Mina SFTP component affecting versions from 4.18.0 before 4.18.5 and from 4.19.0 before 4.22.1. The vulnerability arises because the component concatenates directory paths with file names from the remote server without proper normalization or containment checks, allowing an attacker to access files outside the intended directory. This can lead to unauthorized reading, deletion, or renaming of files on the remote server. The issue is fixed in Apache Camel versions 4.18.5 and 4.22.1.
CVE-2026-79983 is a path traversal vulnerability in the Apache Camel FTP component affecting versions from 4.0.0 before 4.18.5 and from 4.19.0 before 4.22.1. The vulnerability allows an attacker controlling the FTP server or an on-path attacker to craft directory listings with file names that escape the configured polling directory. This leads to unauthorized read, delete, or rename operations on files outside the intended directory using the endpoint's credentials. The issue affects ftp, ftps, and sftp schemes. The vulnerability is fixed in Apache Camel versions 4.18.5 and 4.22.1.
CVE-2026-78163 is a Server-Side Request Forgery (SSRF) vulnerability in the Apache Camel Docling component affecting versions from 4.15.0 before 4.18.5 and from 4.19.0 before 4.22.1. The vulnerability arises because the DoclingProducer interprets message body prefixes to decide how to process them, allowing untrusted input to trigger remote URL fetches or local file reads without explicit configuration. This implicit mode selection can lead to unauthorized access to remote or local resources. The issue is fixed in Apache Camel versions 4.18.5 and 4.22.1. Users unable to upgrade immediately should avoid routing external message bodies into Docling endpoints or use typed bodies or headers to prevent prefix interpretation.
The weForms WordPress plugin up to version 1.6.28 contains a path traversal vulnerability that allows unauthenticated attackers to delete arbitrary media files on the server. This occurs due to insufficient file path validation in the weforms_delete_entry_attachments function. Exploitation requires an administrator to permanently delete a specially crafted form entry, which an attacker can induce via social engineering. The vulnerability has a medium severity rating with a CVSS score of 5.4.
Contact Form 7 Signature Addon WordPress plugin versions up to 4.2.2 contain a path traversal vulnerability. This flaw allows unauthenticated users to manipulate a signature field to attach arbitrary files from the server's wp-content directory to outgoing emails. If the form is set to email a copy to an address controlled by the submitter, the attacker can read the contents of targeted files. The vulnerability has a medium severity with a CVSS score of 5.9.
The Post Export Import with Media WordPress plugin up to version 1.17.2 contains a directory traversal vulnerability via the 'theme_slug' parameter. This vulnerability allows authenticated users with administrator-level privileges or higher to access files outside the intended directory if the 'peiwm_enable_admin_download_buttons' feature is enabled. The vulnerability has a medium severity rating with a CVSS score of 4.9.
Tektronix 3 Series MDO devices before version 1.21.1 contain a path traversal vulnerability in their web management interface. This flaw allows remote attackers to read arbitrary files accessible to the application by exploiting insufficient validation of user-supplied file paths. Exploitation may be possible without authentication depending on the device configuration. The vulnerability has a high severity rating with a CVSS score of 7.5.
Tektronix 3 Series MDO devices before version 1.21.1 contain a path traversal vulnerability in the SCPI FILESystem command interface. This flaw allows remote attackers with limited privileges to read or modify arbitrary files on the device due to insufficient validation of file paths. The vulnerability has a high severity with a CVSS score of 8.1, impacting confidentiality and integrity but not availability.
CVE-2026-41582 is a path traversal vulnerability in countly-server, the server-side component of the Countly analytics platform. Versions prior to 24.05.50 and 25.03.44 allow unauthenticated attackers to traverse outside intended asset directories via certain public image and screenshot routes. This can lead to disclosure of arbitrary readable server files. The issue is fixed in versions 24.05.50 and 25.03.44.
CVE-2026-42269 is a path traversal vulnerability in countly-server's data migration deletion route that allows authenticated users with migration permissions to delete arbitrary writable files or directories. This occurs because the exportid parameter is not properly validated before being used in file path operations. The issue is fixed in versions 24.05.50 and 25.03.44.
Thermo Fisher Torrent Suite Software versions up to 5.18 contain a path traversal vulnerability (CWE-22) that allows an authenticated attacker to read arbitrary files accessible to the web service account on the Torrent Server. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity. There is no information about available patches or vendor advisories addressing this issue.
Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the browse, restore, history and delete operations to resolve to a path outside the repository being operated on, via a percent-encoded traversal sequence (%2e%2e) in the request path, because the containment check uses a string prefix comparison (startswith) instead of a filesystem path boundary check. The target must be a sibling path whose name begins with the repository path, and the user already hold permissions on it; the issue can mislead a user into operating on, or deleting, data other than the repository displayed
The 10Web Booster WordPress plugin up to version 2.34.5 contains a path traversal vulnerability that allows unauthenticated attackers to create arbitrary directories outside the intended cache directory and write a cached page file named 'source.html' into them. The vulnerability arises from unsanitized user input being concatenated into file paths without proper containment checks. While attackers cannot write PHP files or execute code, they can poison the cache and create directories with full permissions.
Groundhogg — CRM, Newsletters, and Marketing Automation WordPress plugin versions up to 4.9.3 contain a path traversal vulnerability in the copy_file function. Authenticated users with Sales Representative-level access or higher, who have the import_contacts capability, can delete arbitrary files on the server. This can lead to remote code execution if critical files like wp-config.php are deleted. The vulnerability arises from insufficient file path validation.
The Debloat – Remove Unused CSS, Optimize JS WordPress plugin versions up to 1.3.0 contains a directory traversal vulnerability via the 's' parameter. This flaw allows authenticated users with administrator-level access or higher to read arbitrary files on the server if the Optimize CSS feature with Inline Google Fonts is enabled. The vulnerability can be triggered by an unauthenticated visitor with a crafted GET request to the public search URL. The CVSS score is 5.9, indicating a medium severity issue.
Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-105032 is a critical vulnerability in the EnergizeLab FastAPI AI inference server used by Eilik and EilikO robots. The AI skill upload endpoint lacks authentication and does not restrict file paths, allowing unauthenticated remote attackers to perform path traversal and write arbitrary files. This enables tampering with AI skill files, potentially impacting the integrity and availability of the AI services.