CWE-23 · weakness in File and Path Handling
Relative Path Traversal
548 CVEs · 6 exploited
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 6
- check available
- 16
- likely to be exploited
- 19
Every one of the 548 is a mark on the map. Named now: 1 to 26, most at risk first.
- TeamCity < 2023.11.4 - Authentication Bypass
- Spring Cloud Config Server - Local File Inclusion
- Aviatrix Controller 6.x before 6.5-1804.1922 - Remote Command Execution
- FortiWeb - Authentication Bypass
- A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker to modify a key table on the server to inject malicious code…
- Cisco Secure Email Gateway Arbitrary File Write Vulnerability
- Spring Cloud Config - Local File Inclusion
- AVEVA InTouch Access Anywhere Secure Gateway - Local File Inclusion
- Apache Flink 1.5.1 - Local File Inclusion
- Next.js <9.3.2 - Local File Inclusion
- Artica Proxy - Unauthenticated LFI
- FortiWLM - Directory Traversal
- Dify <=1.14.1 - Unauthenticated Plugin Daemon Path Traversal
- WordPress File Manager <= 7.2.1 - Directory Traversal
- WordPress Eventin (Themewinter) ≤ 4.0.26 - Arbitrary File Download
- Mlflow <2.3.0 - Local File Inclusion
- SiYuan <= 3.6.5 - Unauthenticated Path Traversal
- Tautulli <= 2.16.1 - Path Traversal
- XWiki Platform - Path Traversal
- XWiki Platform - Information Disclosure
- MikoPBX - Unrestricted File Upload
- esm.sh <= v136 - Local File Inclusion
- Apache Tomcat: Directory traversal via rewrite with possible RCE if PUT is enabled
- Apache Solr: Configset upload on Windows allows arbitrary path write-access
- LCDS Laquis SCADA prior to version 4.1.0.4150 allows a user-supplied path in file operations prior to proper validation. An attacker can leverage this vulnerability to disclose se…
- mySCADA myDESIGNER
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.