CRITICAL

Max severity GitLab path traversal flaw under active reconnaissance

SC Media • Sep 11, 2026

CRITICAL

GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

The Hacker News • Sep 11, 2026

CRITICAL

GitLab Vulnerability Exploited One Day After Disclosure

SecurityWeek • Sep 11, 2026

MEDIUM

CVE-2026-81377 Visual Studio Code Tampering Vulnerability

Microsoft Security Response Center • Sep 08, 2026

MEDIUM

DSA-6475-1 suricata-update - security update

Debian Security • Aug 27, 2026

HIGH

Siemens License Server (SLS)

CISA ICS Advisories • Aug 13, 2026

HIGH

Rockwell Automation ThinManager

CISA All Advisories • Jul 21, 2026

HIGH

NCSC-2026-0247 [1.00] [M/H] Kwetsbaarheden verholpen in Splunk Enterprise en Splunk Cloud Platform

NCSC Netherlands • Jul 17, 2026

MEDIUM

USN-8552-1: Sympa vulnerability

Ubuntu Security • Jul 15, 2026

MEDIUM

CVE-2026-58015 Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive

Microsoft Security Response Center • Jul 01, 2026

CRITICAL

OFFIS DCMTK Toolkit

CISA All Advisories • Jun 30, 2026

HIGH

pydicom pynetdicom Library

CISA All Advisories • Jun 25, 2026

CRITICAL

Daktronics Controller Firmware

CISA All Advisories • Jun 25, 2026

CRITICAL

pydicom pynetdicom Library

CISA All Advisories • Jun 25, 2026

HIGH

Siemens SINEC INS

CISA ICS Advisories • Jun 23, 2026

HIGH

Schneider Electric EasyLogic T150 and Saitel DP

CISA ICS Advisories • Jun 18, 2026

MEDIUM

CVE-2026-44705 tmp: Path Traversal via unsanitized prefix/postfix enables directory escape

Microsoft Security Response Center • Jun 13, 2026

MEDIUM

CVE-2026-7774 tarfile.data_filter path traversal bypass allows writing outside the extraction directory

Microsoft Security Response Center • Jun 07, 2026

HIGH

USN-8359-1: NNCP vulnerability

Ubuntu Security • Jun 01, 2026

MEDIUM

[webapps] WordPress OrderConvo 14 - Path Traversal

Exploit-DB • Jun 01, 2026

HIGH

CVE-2025-51480 Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.

Microsoft Security Response Center • May 23, 2026

HIGH

ABB CoreSense HM and CoreSense M10

CISA ICS Advisories • May 19, 2026

CRITICAL

Siemens Siemens ROS#

CISA ICS Advisories • May 14, 2026

MEDIUM

ABB PCM600

CISA ICS Advisories • Apr 30, 2026

MEDIUM

[webapps] BusyBox 1.37.0 - Path Traversal

Exploit-DB • Apr 30, 2026

MEDIUM

[webapps] NiceGUI 3.6.1 - Path Traversal

Exploit-DB • Apr 30, 2026

CRITICAL

CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline

The Hacker News • Apr 25, 2026

MEDIUM

CVE-2026-34591 Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write

Microsoft Security Response Center • Apr 07, 2026

MEDIUM

CVE-2026-0964 Libssh: improper sanitation of paths received from scp servers

Microsoft Security Response Center • Apr 14, 2026

MEDIUM

Arbitrary directory delete on vmimages delete feature

Fortinet PSIRT • Apr 14, 2026

MEDIUM

Multiple Path traversals in CLI

Fortinet PSIRT • Apr 14, 2026

MEDIUM

Path Traversal in CLI

Fortinet PSIRT • Apr 14, 2026

MEDIUM

Path Traversal in CLI

Fortinet PSIRT • Apr 14, 2026

MEDIUM

Path Traversal on File Content Extraction connector

Fortinet PSIRT • Apr 14, 2026

HIGH

Ubiquiti defect poses account takeover risk for UniFi Networking Application users

CyberScoop • Mar 20, 2026

MEDIUM

Path traversal vulnerability in FortiSOAR Agent Connector Bridge server

Fortinet PSIRT • Mar 10, 2026

HIGH

Valmet DNA Engineering Web Tools

CISA All Advisories • Feb 19, 2026

HIGH

Six flaws found hiding in OpenClaw’s plumbing

CSO Online • Feb 19, 2026

HIGH

Researchers Reveal Six New OpenClaw Vulnerabilities

Infosecurity Magazine • Feb 19, 2026

CRITICAL

U.S. CISA adds a flaw in Gogs to its Known Exploited Vulnerabilities catalog

Web Discovery • Feb 09, 2026

HIGH

VU#504749: PyMuPDF path traversal and arbitrary file write vulnerabilities

CERT/CC • Feb 12, 2026

CRITICAL

CVE-2025-59099: The Access Manager is using the open source web server CompactWebServer written in C#. This web serv...

NIST NVD • Jan 26, 2026