CWE-22: Path traversal
11,052 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 98 of them as exploited in the wild.
- Published CVEs
- 11,052
- Last 12 months
- 3,290
- Critical
- 1,276
- Known exploited
- 98
Critical 1,276High 4,781Medium 4,717Low 268Not scored 10
CVEs per yearBy the year they were published
- 2015141
- 201678
- 2017275
- 2018564
- 2019481
- 2020431
- 2021539
- 2022744
- 2023770
- 20241,074
- 20251,128
- 20263,102
Known exploitedNewest addition to KEV first
- CVE-2025-61624
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0…
Fortinet · FortiOS
ExploitedMedium5.4 - CVE-2021-3199
Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT is used, via a /.. sequence in an…
Product not named
ExploitedCritical9.8 - CVE-2026-104286
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0…
Fortinet · FortiMail
ExploitedCritical9.8 - CVE-2026-93616
Directory Traversal and File upload allows execution of arbitrary script on the Management Server
checkpoint · Quantum Security Management
ExploitedCritical9.8 - CVE-2026-85706
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
GitLab · GitLab
ExploitedCritical10.0 - CVE-2026-66384
Authenticated users may write data outside the intended Docker cache path
jfrog · artifactory
ExploitedMedium5.3 - CVE-2026-59310
vCenter directory-traversal vulnerability
VMware · Cloud Foundation
ExploitedCritical9.8 - CVE-2026-48282
ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Adobe · ColdFusion 2025
ExploitedCritical10.0 - CVE-2026-34909
A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlying system…
Ubiquiti Inc · UniFi OS Server
ExploitedCritical10.0 - CVE-2026-20262
Cisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerability
Cisco · Cisco Catalyst SD-WAN Manager
ExploitedMedium6.5
Newest CVEs
- CVE-2026-124467
OpenEMR before 8.4.0 Remote Code Execution via ESign LFI and fax upload
openemr · openemr
High8.7 - CVE-2026-124457
OpenEMR before 8.3.0 Path Traversal via sl_eob_process.php eraname
openemr · openemr
High7.2 - CVE-2026-124428
Craft CMS 5.7.0 before 5.11.2 Arbitrary SVG File Read via app/icon-svg
craftcms · cms
High7.1 - CVE-2026-124424
WWBN AVideo Path Traversal Arbitrary VTT File Write via receiveAsync.json.php
WWBN · AVideo
High7.1 - CVE-2026-124330
FlowCI flow-core-x LocalFileManager LocalFileManager.java remove path traversal
FlowCI · flow-core-x
Low2.3 - CVE-2026-124329
FlowCI flow-core-x FileHelper.java FileHelper.unzip path traversal
FlowCI · flow-core-x
Low2.3 - CVE-2026-124326
DataLinkDC Dinky Catalogue Upload CatalogueController.java file.getOriginalFilename path traversal
DataLinkDC · Dinky
Medium5.3 - CVE-2026-123534
Tornado before 6.6 Path Traversal via static_url() Version Hashing
tornadoweb · tornado
High8.3 - CVE-2026-104746
Motors <= 1.4.125 - Authenticated (Subscriber+) Arbitrary File Deletion via 'stm_user_avatar_path' User Meta
stylemix · Motors – Car Dealership & Classified Listings Plugin
High8.1 - CVE-2026-110004
wpForo Forum <= 3.2.2 - Authenticated (Subscriber+) Arbitrary File Deletion via Path Traversal via 'theme' Parameter
tomdever · wpForo Forum
Medium6.5