CWE-23

553 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 6 of them as exploited in the wild.

Critical 71High 249Medium 203Low 30Not scored 0

CVEs per yearBy the year they were published

CVE-2026-76519
Cisco Secure Email Gateway Arbitrary File Write Vulnerability
Cisco · Cisco Secure Email
ExploitedCritical9.8
CVE-2026-34926
A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to…
Trend Micro, Inc. · TrendAI Apex One
ExploitedMedium6.7
CVE-2024-27199
In JetBrains TeamCity before 2023.11.4 path traversal allowing to perform limited admin actions was possible
JetBrains · TeamCity
ExploitedHigh7.3
CVE-2025-64446
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0…
Fortinet · FortiWeb
ExploitedCritical9.4
CVE-2020-5410
Directory Traversal with spring-cloud-config-server
Spring by VMware · Spring Cloud Config
ExploitedHigh7.5
CVE-2021-40870
An issue was discovered in Aviatrix Controller 6.x before 6.5-1804.1922. Unrestricted upload of a file with a dangerous type is possible, which allows an…
Product not named
ExploitedCritical9.8

CVE-2026-123973
SharePoint Products CopyMove before 2026-11-06 allows traversal. An authenticated SharePoint user with the necessary permissions to use the ZIP import…
SharePoint Products · CopyMove for SharePoint V6
Medium5.0
CVE-2026-62855
FreeScout: Path Traversal in App Logs Viewer Exposes Arbitrary Local Files
freescout-help-desk · freescout
Medium4.4
CVE-2026-123845
In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via JSON Schema references in untrusted projects
JetBrains · IntelliJ IDEA
Low3.3
CVE-2026-123305
In JetBrains IntelliJ IDEA before 2026.3 path traversal was possible via unpacking Dev Container archives from a remote host
JetBrains · IntelliJ IDEA
High7.5
CVE-2026-63499
zt-zip: ZipUtil.unpack can change file permissions of output directory
zeroturnaround · zt-zip
Medium6.9
CVE-2026-116635
Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server
AWS · aws-serverless-mcp-server
Medium6.9
CVE-2026-120312
Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name
Jovancoding · Network-AI
High8.7
CVE-2026-120311
Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job ID
Jovancoding · Network-AI
High8.7
CVE-2026-120307
Beta9 container escape via unvalidated sandbox file paths
beam-cloud · Beta9 worker
Critical9.9
CVE-2026-120225
Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal
Oray · Pugongying X5 Pro
Critical9.4