Skip to content

CWE-25 · weakness in File and Path Handling

Path Traversal: '/../filedir'

12 CVEs · 1 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
1

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

  1. Cisco SD-WAN Software Privilege Escalation VulnerabilityCVE-2022-20775Cisco · CVSS 7.8 · 12% likelycovered by CyberSIXT

    Cisco

  2. Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.CVE-2025-68916Riello · CVSS 9.1 · 2.6% likely

    Riello

  3. Path traversal via crafted cpio archives in Engrampa archiversCVE-2023-52138mate-desktop · CVSS 8.2 · 1.7% likely
  4. Path Traversal in Neutron IP CameraCVE-2023-6118Neutron · CVSS 7.5 · 0.8% likely
  5. Best WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory TraversalCVE-2023-6947https://fooplugins.com · CVSS 7.7 · 0.8% likely
  6. Path Traversal vulnerability in Franklin Fueling System EVO 550/5000CVE-2024-2442Franklin Fueling System · CVSS 7.5 · 0.7% likely
  7. SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the af…CVE-2026-68959Sky Co., LTD. · CVSS 5.8 · 0.7% likely

    Sky Co., LTD.

  8. Cisco SD-WAN Software Privilege Escalation VulnerabilitiesCVE-2022-20818Cisco · CVSS 7.8 · 0.6% likely

    Cisco

  9. Directory Traversal & Filesystem can be accessed by a non-admin userCVE-2026-23877swingmx · CVSS 5.3 · 0.6% likely
  10. Path Traversal in VGuard IP Camera Network RecorderCVE-2023-6919Biges Safe Life Technologies Electronics Inc. · CVSS 7.5 · 0.6% likely
  11. Tsinghua Unigroup Electronic Archives System exampleDownload.html path traversalCVE-2025-0225Tsinghua Unigroup · CVSS 4.3 · 0.5% likely

    Tsinghua Unigroup

  12. Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.CVE-2025-58286Huawei · CVSS 3.3 · 0.1% likely

    Huawei

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

Updated AboutDevelopersSign in