CWE-27
30 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 30
- Last 12 months
- 6
- Critical
- 5
- Known exploited
- 1
Critical 5High 13Medium 11Low 1Not scored 0
CVEs per yearBy the year they were published
- 20211
- 20221
- 20237
- 202410
- 20255
- 20266
Known exploitedNewest addition to KEV first
- CVE-2024-23897
Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an '@' character followed by a file path…
Jenkins Project · Jenkins
ExploitedCritical9.8
Newest CVEs
- CVE-2026-17495
moment vulnerable to Path Traversal via crafted non-string locale name
moment · moment
Medium5.9 - CVE-2026-76344
Path Traversal through the Search Dispatch REST API in Splunk Enterprise
Splunk · Splunk Enterprise
High7.7 - CVE-2026-62391
Apache Kyuubi: kyuubi.session.local.dir.allow.list bypass via unprefixed Spark file-conf aliases
Apache Software Foundation · Apache Kyuubi
High8.1 - CVE-2026-24457
An unsafe parsing of OpenMQ's configuration in OpenMQ versions <6.5.2 and <6.9.0, allows a remote attacker to read arbitrary files from a MQ Broker's server. A…
Eclipse Foundation · Eclipse OpenMQ
Critical9.1 - CVE-2026-20018
Cisco Firepower Management Center Software and Firepower Threat Defense Path Traversal Vulnerability
Cisco · Cisco Secure Firewall Management Center (FMC)
Medium5.9 - CVE-2025-66518
Apache Kyuubi: Unauthorized directory access due to missing path normalization
Apache Software Foundation · Apache Kyuubi
High8.8 - CVE-2025-58292
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
Huawei · HarmonyOS
Low3.3 - CVE-2025-10438
Path Traversal in Yordam BT's Yordam Katalog
Yordam Information Technology Consulting Education and Electrical Systems Industry Trade Inc. · Yordam Katalog
High8.6 - CVE-2025-58761
Tautulli vulnerable to Unauthenticated Path Traversal in `real_pms_image_proxy`
Tautulli · Tautulli
High8.6 - CVE-2025-52237
An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal.
Product not named
Medium6.5