Reliance on File Name or Extension of Externally-Supplied File

Every one of the 11 is a mark on the map. Named now: 1 to 11, most at risk first.

1. WordPress Download Manager <= 3.1.24 Authenticated Arbitrary File UploadCVE-2021-34639W3 Eden, Inc. · CVSS 7.5 · 0.6% likely

   W3eden

2. Active Storage: Possible arbitrary file read and remote code execution in Active Storage video previews, analysis and image processingCVE-2026-126186rails · CVSS 8.8 · 0.5% likely

   Rails

3. Stream Target Remote Code Execution in Wowza Streaming EngineCVE-2024-52052Wowza · CVSS 9.4 · 0.5% likely

   Wowza

4. picklescan - Security scanning bypass via non-standard file extensionsCVE-2025-1889mmaitre314 · CVSS 5.3 · 0.4% likely

   Mmaitre314

5. Maho Vulnerable to Authenticated Remote Code Execution via File UploadCVE-2025-58449MahoCommerce · CVSS 8.7 · 0.3% likely
6. CVE-2023-0350Akuvox · CVSS 6.5 · 0.3% likely

   Akuvox

7. A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application allows a remote authenticated attac…CVE-2023-45599AiLux · CVSS 5.5 · 0.2% likely

   AiLux

8. Sauter: Arbitrary File UploadCVE-2025-41720Sauter · CVSS 4.3 · 0.2% likely

   Sauter

9. Matrix – Tafnit v8 CWE-646: Reliance on File Name or Extension of Externally-Supplied FileCVE-2024-38432Matrix · CVSS 5.5 · 0.2% likely

   Matrix

10. Zoom Workplace VDI Plugin macOS Universal Installer - Symlink FollowingCVE-2025-30662Zoom Communications Inc. · CVSS 6.6 · 0.1% likely

    Zoom Communications, Inc

11. Cisco Enterprise Chat and Email Lite Agent File Upload VulnerabilityCVE-2026-20172Cisco · CVSS 4.3 · 0.1% likely

    Cisco

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.