Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-35

193 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

All 193 in the listAtom feed of new CVEsWhat CWE-35 is, at MITRE (opens in a new tab)
Published CVEs
193
Last 12 months
61
Critical
23
Known exploited
1

Critical 23High 88Medium 79Low 3Not scored 0

CVEs per yearBy the year they were published

  1. 20181
  2. 20201
  3. 20214
  4. 20223
  5. 202312
  6. 202444
  7. 202573
  8. 202655

Known exploitedNewest addition to KEV first

  • CVE-2025-8088

    Path traversal vulnerability in WinRAR

    win.rar GmbH · WinRAR

    ExploitedHigh8.4

Newest CVEs

  • CVE-2026-39734

    WordPress WP EasyPay plugin <= 4.5.4 - Path Traversal vulnerability

    Saad Iqbal · WP EasyPay

    High7.5
  • CVE-2026-118633

    A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race…

    Sophos · SG UTM

    Critical9.2
  • CVE-2026-44415

    Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to…

    Siemens · Industrial Edge Device Kit - arm64 V1.10

    High8.9
  • CVE-2026-44414

    A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11,…

    Siemens · Industrial Edge Cloud Device (IECD)

    Medium6.9
  • CVE-2026-5703

    Path Traversal in Satel Iberia SenNet Datalogger Serie 200

    Satel Iberia · SenNet Datalogger Serie 200

    High7.1
  • CVE-2026-105683

    Ghost: Path Traversal Vulnerability in Ghost ImageSize Service

    TryGhost · Ghost

    Low3.8
  • CVE-2026-103290

    Ghost 6.14.0 before 6.27.0 Path Traversal via ImageSize

    TryGhost · Ghost

    Medium5.1
  • CVE-2026-82824

    Path traversal may allow arbitrary files to be viewed, created, modified, or deleted

    Hitachi Industrial Equipment Systems · Hitachi Coding Software Suite

    Critical9.3
  • CVE-2026-97244

    WordPress Creator LMS plugin <= 1.2.19 - Path Traversal vulnerability

    WPFunnels · Creator LMS

    High7.5
  • CVE-2026-27557

    Path Traversal in /index.php/view_uploaded_iodd_file

    Pepperl+Fuchs · ICE2-8IOL1-G65L-V1D

    High7.5

Vendors it comes up for most

  1. Cisco9
  2. Axis Communications AB8
  3. Q-Free7
  4. Dell5
  5. Microsoft5
  6. Mikado-Themes5
  7. SAP_SE5
  8. Siemens4
  9. SUSE3
  10. Splunk3