Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions.
CVE-2026-49112
Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions.
#cwe-35
共收录 38 条相关情报。
← 返回所有主题Unauthenticated Path Traversal in FastDup <= 2.7.2 versions.
CVE-2026-52703
Unauthenticated Path Traversal in FastDup <= 2.7.2 versions.
Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions.
CVE-2026-49112
Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions.
Custom role Path Traversal in WP Customer Area <= 8.3.4 versions.
CVE-2026-42661
Custom role Path Traversal in WP Customer Area <= 8.3.4 versions.
SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service...
CVE-2026-24315
SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain,
SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft...
CVE-2026-40128
SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a malicious HTTP logon
SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file inclusion parameters, enab...
CVE-2026-40128
该漏洞存在于SAP NetWeaver Application Server Java的Web Container组件中。攻击者无需身份验证即可构造恶意的HTTP登录请求，通过操纵文件包含参数，实现路径遍历攻击。成功利用后，攻击者可以读取或
SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by...
CVE-2026-24315
CVE-2026-24315 是 SAP Fiori Launchpad 中的一个安全漏洞。攻击者可以构造恶意的 URL，当用户点击该 URL 时，会触发 Fiori 域上的任意服务调用。此漏洞允许攻击者通过精心设计的链接窃取用户的凭证，从
Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical path traversal vulnerability exists in Dokploy v0.26.5 that allows authenticated...
CVE-2026-45661
Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical path traversal vulnerab
`PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using `--root`. If the ...
CVE-2026-44933
`PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) i
SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process...
CVE-2026-7302
SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an atta
When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may...
CVE-2026-42930
When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Applia
When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restrictions on a BIG-IP system. Note: Softwar...
CVE-2026-42930
When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Applia
When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator r...
CVE-2026-24464
When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that
A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integrations-in-rancher/rancher-extensions) where malicious code can be inj...
CVE-2026-25705
A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integrations-in-ra
Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall performs rule matching on the raw (non-normalized) reques...
CVE-2026-42274
Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall
Rancher Extensions have arbitrary file access via path traversal
CVE-2026-25705
### Impact A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integr
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.
CVE-2026-0205
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted ser