CWE-35: Path Traversal: '.../...//'
Filter
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory.
What the weakness is: CWE-35 at MITRE. All weaknesses
Ask an AI about CWE-35
Show the prompt
Explain CWE-35: Path Traversal: '.../...//' and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/35.html and https://cve.bz/cve/cwe/35?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.
- 7.5CVE-2026-39734EPSS 0.5%
Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.
- 9.2CVE-2026-118633EPSS 0.6%
A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race condition by sustaining repeated attacks for a few minutes when the email proxy is …
- 8.9CVE-2026-44415EPSS 0.5%
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to …
- 6.9CVE-2026-44414EPSS 0.5%
A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge Device Kit - arm64 V1.12, Industrial Edge Device Kit - arm64 V1…
- 7.1CVE-2026-5703EPSS 0.3%
Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user ru…
- 3.8CVE-2026-105683EPSS 0.3%
Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data storage directories on the server. This issue is fixed in versio…
- 5.1CVE-2026-103290EPSS 0.3%
Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insufficient input validation of user-supplied file paths may allow authenticated staff users to access local files out…
- 9.3CVE-2026-82824EPSS 0.4%
Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files. This issue affects Hitachi Coding Software Suite: through 3.3.0.
- 7.5CVE-2026-97244EPSS 0.3%
Contributor Path Traversal in Creator LMS <= 1.2.19 versions.
- 7.5CVE-2026-27557EPSS 0.7%
An unauthenticated remote attacker can exploit a path traversal vulnerability in the /index.php/view_uploaded_iodd_file endpoint allowing the SSH server's private keys to be read.
- 6.5CVE-2026-85310EPSS 0.4%
import_contacts Path Traversal in Groundhogg <= 4.7.1 versions.
- 6.8CVE-2026-21103EPSS 0.2%
Path traversal in GalaxyDiagnostics prior to SMR Sep-2026 Release 1 allows physical attackers to access files with system privilege.
- 8.8CVE-2026-21092EPSS 0.5%
Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.
- 4.4CVE-2026-20513EPSS 0.2%
In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtained the System privilege. User interaction is not needed for e…
- 7.1CVE-2026-59909EPSS 0.2%
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
- 3.3CVE-2026-56089EPSS 0.2%
Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
- 7.5CVE-2026-28157EPSS 0.4%
Subscriber Path Traversal in Do Lasso <= 358 versions.
- 8.7CVE-2026-69109EPSS 0.6%
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attack…
- 9.1CVE-2026-13716EPSS 0.8%
Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Controller application and perform remote code execution.
- 9.9CVE-2026-59115EPSS 1.0%
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
- 6.5CVE-2026-66695EPSS 0.4%
Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions.
- 4.8CVE-2025-59181EPSS 0.4%
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change directory permissions, denying access to legitimate users.
- 7.8CVE-2025-60835EPSS 0.2%
An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal.
- 6.5CVE-2026-49779EPSS 0.4%
Path Traversal: '.../...//' vulnerability in Addify Tax Exempt for WooCommerce allows Path Traversal. This issue affects Tax Exempt for WooCommerce: from n/a before 1.9.5.
- 8.1CVE-2026-52707EPSS 0.5%
Unauthenticated Local File Inclusion in Kastell <= 2.0 versions.
- 9.6CVE-2026-52703EPSS 0.4%
Unauthenticated Path Traversal in FastDup <= 2.7.2 versions.
- 7.5CVE-2026-49112EPSS 0.3%
Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions.
- 8.8CVE-2026-42661EPSS 0.4%
Custom role Path Traversal in WP Customer Area <= 8.3.4 versions.
- 9.0CVE-2026-40128EPSS 0.5%
SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file inclusion parameters, enabling path traversal and processing of the included file. Proce…
- 4.2CVE-2026-24315EPSS 0.2%
SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could compromise accounts by stealing user credentials. Successful exploitation requires a…
- 9.9CVE-2026-45661EPSS 0.8%
Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical path traversal vulnerability exists in Dokploy v0.26.5 that allows authenticated users to write arbitrary files to the filesystem during appli…
- 8.5CVE-2026-44933EPSS 0.2%
`PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using `--root`. If the chroot target is `/`, it is a no-op, allowing the traversed pa…
- 9.8CVE-2026-45495EPSS 1.0%
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- 9.1CVE-2026-7302EPSS 0.4%
SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere the server process has write access, by including ../ sequences in the upload fi…
- 8.5CVE-2026-42930EPSS 0.5%
When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restrictions on a BIG-IP system. Note: Software versions which have reached End of Technical Support (EoTS) …
- 6.9CVE-2026-24464EPSS 0.9%
When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker with administrator role privileges to cross a security boundary and delete files. …
- 8.4CVE-2026-25705EPSS 0.4%
A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integrations-in-rancher/rancher-extensions) where malicious code can be injected in Rancher through a path traversal in the `compressedEn…
- 7.3CVE-2026-0804EPSS 0.1%
An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the inst…
- 7.8CVE-2026-42274EPSS 0.4%
Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall performs rule matching on the raw (non-normalized) request path, while downstream components may normalize dot-segments…
- 8.8CVE-2026-20034EPSS 0.7%
A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to insufficient validation of user-…
- 6.8CVE-2026-0205EPSS 0.4%
A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services.
- 9.3CVE-2026-6074EPSS 0.6%
Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerability in the download_debuglog_file.php endpoint used for Debug Logs downloads. An unauthenticated attacker can manipulate the name parameter to read ar…
- 7.1CVE-2026-28265EPSS 0.1%
PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.
- 7.5CVE-2026-25397EPSS 0.4%
Path Traversal: '.../...//' vulnerability in Snowray Software File Uploader for WooCommerce file-uploader-for-woocommerce allows Path Traversal.This issue affects File Uploader for WooCommerce: from n/a through <= 1.0.4.
- 5.0CVE-2026-32415EPSS 0.3%
Path Traversal: '.../...//' vulnerability in Bogdan Bendziukov Squeeze squeeze allows Path Traversal.This issue affects Squeeze: from n/a through <= 1.7.7.
- 6.7CVE-2026-26124EPSS 0.5%
'.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally.
- 5.3CVE-2025-69325EPSS 0.4%
Path Traversal: '.../...//' vulnerability in primersoftware Primer MyData for Woocommerce primer-mydata allows Path Traversal.This issue affects Primer MyData for Woocommerce: from n/a through <= 4.2.8.
- 9.4CVE-2025-59793EPSS 1.1%
Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at /axis2/services/WsPortalV6UpDwAxis2Impl to authenticated users to be able to upload files. However, the application doesn't properly sanitize the jobDirectory parameter, wh…
- 4.6CVE-2026-1763EPSS 0.2%
Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions.
- 4.6CVE-2025-58381EPSS 0.2%
A vulnerability in Brocade Fabric OS before 9.2.1c2 could allow an authenticated attacker with admin privileges using the shell commands “source, ping6, sleep, disown, wait to modify the path variables and move upwards in the directory…