CWE-25 · File and Path Handling
Path Traversal: '/../filedir'
12CVEs
SortMost likely exploited
12 CVEs with CWE-25 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-20775In CISA KEVExploitedCisco SD-WAN Software Privilege Escalation VulnerabilityCisco · Cisco Catalyst SD-WAN · CVSS 7.8 · 2022-09-30 | 7.8 | 12% | 2022-09-30 |
| CVE-2025-68916Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.Riello · NetMan · CVSS 9.1 · 2025-12-24 | 9.1 | 2.6% | 2025-12-24 |
| CVE-2023-52138Path traversal via crafted cpio archives in Engrampa archiversmate-desktop · engrampa · CVSS 8.2 · 2024-02-05 | 8.2 | 1.7% | 2024-02-05 |
| CVE-2023-6118Path Traversal in Neutron IP CameraNeutron · IP Camera · CVSS 7.5 · 2023-11-23 | 7.5 | 0.8% | 2023-11-23 |
| CVE-2023-6947Best WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory Traversalhttps://fooplugins.com · FooGallery Premium · CVSS 7.7 · 2024-12-10 | 7.7 | 0.8% | 2024-12-10 |
| CVE-2024-2442Path Traversal vulnerability in Franklin Fueling System EVO 550/5000Franklin Fueling System · EVO 550 · CVSS 7.5 · 2024-03-19 | 7.5 | 0.7% | 2024-03-19 |
| CVE-2026-68959SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the af…Sky Co., LTD. · SKYSEA Client View · CVSS 5.8 · 2026-08-25 | 5.8 | 0.7% | 2026-08-25 |
| CVE-2022-20818Cisco SD-WAN Software Privilege Escalation VulnerabilitiesCisco · Cisco SD-WAN Solution · CVSS 7.8 · 2022-09-30 | 7.8 | 0.6% | 2022-09-30 |
| CVE-2026-23877Directory Traversal & Filesystem can be accessed by a non-admin userswingmx · swingmusic · CVSS 5.3 · 2026-01-19 | 5.3 | 0.6% | 2026-01-19 |
| CVE-2023-6919Path Traversal in VGuard IP Camera Network RecorderBiges Safe Life Technologies Electronics Inc. · VGuard · CVSS 7.5 · 2024-01-26 | 7.5 | 0.6% | 2024-01-26 |
| CVE-2025-0225Tsinghua Unigroup Electronic Archives System exampleDownload.html path traversalTsinghua Unigroup · Electronic Archives System · CVSS 4.3 · 2025-01-05 | 4.3 | 0.5% | 2025-01-05 |
| CVE-2025-58286Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.Huawei · HarmonyOS · CVSS 3.3 · 2025-10-11 | 3.3 | 0.1% | 2025-10-11 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.