File and Path Handling

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a remote attacker to upload a specially crafted file to an a…CVE-2023-22336DOS Co., Ltd. · 1.1% likely

   CWE-22

2. Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerabi…CVE-2025-58072DOS Co., Ltd. · CVSS 8.7 · 0.6% likely

   CWE-22

3. SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.CVE-2025-54762DOS Co., Ltd. · CVSS 9.3 · 0.5% likely

   CWE-434

4. SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.CVE-2025-53970DOS Co., Ltd. · CVSS 9.3 · 0.5% likely

   CWE-434

5. Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerabi…CVE-2025-54819DOS Co., Ltd. · CVSS 7.1 · 0.5% likely

   CWE-22

6. Path Traversal vulnerability exists in SS1/ SS1 Cloud provided by DOS Co., Ltd. and the ODM product rocoeyes provided by Rococo Co. Ltd. Arbitrary files may be deleted.CVE-2026-113437DOS Co., Ltd. · CVSS 6.9 · 0.3% likely

   CWE-22

7. Files or directories accessible to external parties issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If exploited, uploaded files and SS1 configu…CVE-2025-52460DOS Co., Ltd. · CVSS 6.9 · 0.3% likely

   CWE-552

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.