CWE-69 · File and Path Handling
Improper Handling of Windows ::DATA Alternate Data Stream
3CVEs
SortMost likely exploited
3 CVEs with CWE-69 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-43033JPress through 5.1.1 on Windows has an arbitrary file upload vulnerability that could cause arbitrary code execution via ::$DATA to AttachmentController, such as a .jsp::$DATA fil…Jpress · Jpress · CVSS 8.8 · 2024-08-22 | 8.8 | 1.0% | 2024-08-22 |
| CVE-2026-52792Algernon: Server-side script source disclosure on Windows via NTFS filenamexyproto · algernon · CVSS 8.7 · 2026-08-19 | 8.7 | 0.6% | 2026-08-19 |
| CVE-2025-3941Improper Handling of Windows: DATA Alternate Data StreamTridium · Niagara Framework · CVSS 5.4 · 2025-05-22 | 5.4 | 0.5% | 2025-05-22 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.