CWE-22: Path traversal
10,966 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 98 of them as exploited in the wild.
- Published CVEs
- 10,966
- Last 12 months
- 3,226
- Critical
- 1,263
- Known exploited
- 98
Critical 1,263High 4,743Medium 4,687Low 264Not scored 9
CVEs per yearBy the year they were published
- 2025148
- 2025115
- 2025274
- 20262,758
- 20261,086
- 20261,043
- 2026783
- 2026739
- 2026586
- 2026521
- 2026217
- 2026127
Known exploitedNewest addition to KEV first
- CVE-2025-61624
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0…
Fortinet · FortiOS
ExploitedMedium5.4 - CVE-2021-3199
Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an…
Product not named
ExploitedCritical9.8 - CVE-2026-104286
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0…
Fortinet · FortiMail
ExploitedCritical9.8 - CVE-2026-93616
Directory Traversal and File upload allows execution of arbitrary script on the Management Server
checkpoint · Quantum Security Management
ExploitedCritical9.8 - CVE-2026-85706
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
GitLab · GitLab
ExploitedCritical10.0 - CVE-2026-66384
Authenticated users may write data outside the intended Docker cache path
jfrog · artifactory
ExploitedMedium5.3 - CVE-2026-59310
vCenter directory-traversal vulnerability
VMware · Cloud Foundation
ExploitedCritical9.8 - CVE-2026-48282
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Adobe · ColdFusion 2025
ExploitedCritical10.0 - CVE-2026-34909
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system…
Ubiquiti Inc · UniFi OS Server
ExploitedCritical10.0 - CVE-2026-20262
Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability
Cisco · Cisco Catalyst SD-WAN Manager
ExploitedMedium6.5
Newest CVEs
- CVE-2026-108327
Tanium addressed a path traversal vulnerability in Tanium Data Service.
Tanium · Tanium Data Service
Medium5.0 - CVE-2026-121542
Bake filesystem path entitlements approval can be skipped for path using basename prefix
Docker · Docker Buildx
Low1.8 - CVE-2026-63395
isomorphic-git: Arbitrary file write outside the working tree via a directory symlink during checkout (potential RCE)
isomorphic-git · isomorphic-git
High8.8 - CVE-2026-63478
isomorphic-git: Path traversal via a ".." tree-entry name writes files outside the working directory on clone/checkout
isomorphic-git · isomorphic-git
Medium5.3 - CVE-2026-63500
Yeti: Path traversal in DFIQ uuid allows authenticated arbitrary file write during archive export
yeti-platform · yeti
High7.1 - CVE-2026-63502
Yeti: Path traversal in ExportTask name allows authenticated arbitrary file read and write
yeti-platform · yeti
High8.3 - CVE-2026-63436
zt-zip: Path traversal in fluent API unpack
zeroturnaround · zt-zip
Medium6.1 - CVE-2026-121263
phpMyAdmin MoTranslator Loader.php getTranslator path traversal
phpMyAdmin · MoTranslator
Medium5.3 - CVE-2026-115294
Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion
Elastic · Kibana
High7.3 - CVE-2026-121544
Koodo Reader through 2.4.6 Path Traversal via OPDS Cover and Download Handlers
koodo-reader · koodo-reader
Medium6.9