CWE-26

CVEs per yearBy the year they were published

1. 20212
2. 20232
3. 20247
4. 20253
5. 20266

Newest CVEs

• CVE-2026-112904

  Vvveb: Path Traversal in nextRestore() and nextBackup()

  givanz · Vvveb

  High8.7
• CVE-2026-15896

  Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter

  WebRehab · Super Forms – Drag & Drop Form Builder

  Critical9.1
• CVE-2026-76317

  Path Traversal through the Lookup Configuration REST API in Splunk Enterprise

  Splunk · Splunk Enterprise

  High8.8
• CVE-2026-46747

  A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected application does not properly sanitize path input in the `GET…

  Siemens · SINEC INS

  Medium5.3
• CVE-2026-42196

  django-s3file: Relative path traversal

  codingjoe · django-s3file

  Critical9.9
• CVE-2026-25575

  NavigaTUM has a Path Traversal Vulnerability in the propose_edits functionality

  TUM-Dev · NavigaTUM

  High8.8
• CVE-2022-45133

  Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins. A particularly structured XML file could allow…

  Product not named

  Medium6.5
• CVE-2025-53908

  RomM vulnerable to Authenticated Path Traversal

  rommapp · romm

  High8.3
• CVE-2025-25295

  Label Studio has a Path Traversal Vulnerability via image Field

  HumanSignal · label-studio

  High8.7
• CVE-2024-5866

  Arbitrary Directory Listing in Centrify PAS

  Delinea · Centrify PAS

  Medium5.0

Vendors it comes up for most

1. Cisco2
2. Delinea2
3. Siemens2
4. HumanSignal1
5. Splunk1
6. TUM-Dev1
7. WebRehab1
8. codingjoe1
9. givanz1
10. hap-wi1