СИТУАЦИОННЫЙ ОБЗОР
Все уязвимости
Поиск по CVE, продуктам и источникам. Условия фильтра сохраняются в ссылке.
Лента уязвимостей
30| УЯЗВИМОСТЬ / ПРОДУКТ | ПРИОРИТЕТ | CVSS | EPSS | СИГНАЛЫ | ОПУБЛИКОВАНА | Карточка |
|---|---|---|---|---|---|---|
| CVE-2026-90721 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release... Dell / PowerProtect Data Domain | Низкий | 3.4 | 0,12 % | 28.10.2026 | ||
| CVE-2025-59342 esm.sh writes arbitrary files via path traversal in `X-Zone-Id` header esm-dev / esm.sh · github.com/esm-dev/esm.sh | Средний | 5.5 | 3,15 % | Патч | 17.09.2025 | |
| CVE-2026-118485 Axel Download Accelerator Path Traversal via URL Filename Decoding Axel Download Accelerator / Axel | Высокий | 7.0 | 0,56 % | Патч | 28.10.2026 | |
| CVE-2026-41082 In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach OCaml / opam · Red Hat / Red Hat Enterprise Linux 10 | Критический | 7.8 | 0,21 % | PoCПатч | 16.04.2026 | |
| CVE-2026-39813 A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSand Fortinet / FortiSandbox · Fortinet / FortiSandbox Cloud | Критический | 9.1 | 22,22 % | 14.04.2026 | ||
| CVE-2026-108980 Blinko through 1.8.8 allows directory traversal, overwriting startup files as root, via installPlugi Blinko / Blinko | Критический | 8.8 | 1,06 % | PoC | 12.10.2026 | |
| CVE-2026-92533 Path Traversal in BugTracker.NET BugTracker.NET / BugTracker.NET | Высокий | 7.1 | 0,36 % | 07.10.2026 | ||
| CVE-2026-105314 Papermerge 3.5.3 allows remote code execution by a standard user via directory traversal in a /api/d Papermerge / Papermerge | Критический | 7.5 | 1,13 % | PoC | 05.10.2026 | |
| CVE-2026-104994 Trivy before 0.71.0 allows directory traversal in Terraform filesystem functions when they try to ac aquasec / Trivy | Низкий | 2.5 | 0,2 % | 02.10.2026 | ||
| CVE-2026-103088 Handlebars.java before 4.5.5 allows directory traversal. In handlebars-springmvc 4.5.3 and 4.5.4, th jknack / handlebars.java | Критический | 7.5 | 0,69 % | PoC | 30.09.2026 | |
| CVE-2026-97730 In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulne Netgate / pfSense Plus · Netgate / pfSense CE | Высокий | 8.5 | 1,03 % | Патч | 25.09.2026 | |
| CVE-2026-34151 XWiki Platform: Resource path traversal via /skin/ action endpoint in Jetty 12+ xwiki / xwiki-platform | Высокий | 8.2 | 2,47 % | 14.09.2026 | ||
| CVE-2025-70819 Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." ma Zettlab / D6 Ultra | Средний | 6.3 | 0,14 % | 13.09.2026 | ||
| CVE-2026-22810 Joplin: Path traversal in OneNote importer allows overwriting arbitrary files laurent22 / joplin · @joplin/onenote-converter | Критический | 8.2 | 0,21 % | PoC | 18.05.2026 | |
| CVE-2026-76353 Path Traversal through Knowledge Bundle Replication in Splunk Enterprise Splunk / Splunk Enterprise | Средний | 5.4 | 0,37 % | 20.08.2026 | ||
| CVE-2026-14947 Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious ZIP file Frauscher Sensortechnik / FDS 102 | Высокий | 8.6 | 1,48 % | 20.08.2026 | ||
| CVE-2026-73573 In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Br Zimbra / Collaboration | Низкий | 3.1 | 0,45 % | 13.08.2026 | ||
| CVE-2026-48047 XWiki Platform vulnerable to potential arbitrary file writing using path traversal from (subwiki) admin xwiki / xwiki-platform | Высокий | 5.9 | 0,65 % | PoC | 08.08.2026 | |
| CVE-2024-1459 Undertow: directory traversal vulnerability · Red Hat / Red Hat JBoss Enterprise Application Platform 7.4 for RHEL 8 | Средний | 5.3 | 1,71 % | 12.02.2024 | ||
| CVE-2026-66140 Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequ Exim / Exim | Высокий | 8.4 | 0,39 % | 24.07.2026 | ||
| CVE-2026-46687 Emlog Local File Inclusion (LFI) emlog / emlog | Критический | 7.7 | 0,44 % | PoC | 16.07.2026 | |
| CVE-2026-44942 libzypp .repo files can have an optional path which can lead to path traversal attacks SUSE / libzypp | Средний | 6.5 | 0,42 % | 18.06.2026 | ||
| CVE-2026-49103 Webmin before 2.640 does not safely construct a filename for saving of an attachment within the mail Webmin / Webmin | Критический | 9.4 | 0,4 % | 27.05.2026 | ||
| CVE-2026-33431 Roxy-WI Vulnerable to Authenticated Arbitrary File Read via Path Traversal in Config Version Viewer roxy-wi / roxy-wi | Высокий | 5.7 | 0,39 % | PoC | 20.04.2026 | |
| CVE-2026-40318 SiYuan: Publish Reader Path Traversal Delete via `removeUnusedAttributeView` siyuan-note / siyuan | Высокий | 8.5 | 0,29 % | 17.04.2026 | ||
| CVE-2024-43035 Fonoster is vulnerable to directory traversal Fonoster / Fonoster · @fonoster/voice | Средний | 5.8 | 2,4 % | 05.03.2026 | ||
| CVE-2026-28538 Path traversal vulnerability in the certificate management module. Impact: Successful exploitation o Huawei / HarmonyOS | Средний | 5.9 | 0,07 % | 05.03.2026 | ||
| CVE-2026-28427 OpenDeck affected by path traversal allows arbitrary file read nekename / OpenDeck | Средний | 5.9 | 0,5 % | 04.03.2026 | ||
| CVE-2025-60344 A path traversal (directory traversal) vulnerability in D-Link DSR series routers allows unauthentic D-Link / DSR-150 | Критический | 8.6 | 10,89 % | 21.10.2025 | ||
| CVE-2025-26427 In multiple locations, there is a possible Android/data access due to a path traversal error. This c Google / Android | Средний | 4.4 | 0,11 % | 04.09.2025 |
Информация справочная. Применимость и автоматические рекомендации проверяйте по первичному бюллетеню.