HIGH

CVE-2025-51480 Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.

Microsoft Security Response Center • May 23, 2026

HIGH

ABB CoreSense HM and CoreSense M10

CISA ICS Advisories • May 19, 2026

CRITICAL

Siemens Siemens ROS#

CISA ICS Advisories • May 14, 2026

MEDIUM

ABB PCM600

CISA ICS Advisories • Apr 30, 2026

MEDIUM

[webapps] NiceGUI 3.6.1 - Path Traversal

Exploit-DB • Apr 30, 2026

MEDIUM

[webapps] BusyBox 1.37.0 - Path Traversal

Exploit-DB • Apr 30, 2026

CRITICAL

CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline

The Hacker News • Apr 25, 2026

MEDIUM

CVE-2026-34591 Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write

Microsoft Security Response Center • Apr 07, 2026

MEDIUM

CVE-2026-0964 Libssh: improper sanitation of paths received from scp servers

Microsoft Security Response Center • Apr 14, 2026

MEDIUM

Path Traversal on File Content Extraction connector

Fortinet PSIRT • Apr 14, 2026

MEDIUM

Path Traversal in CLI

Fortinet PSIRT • Apr 14, 2026

MEDIUM

Path Traversal in CLI

Fortinet PSIRT • Apr 14, 2026

MEDIUM

Multiple Path traversals in CLI

Fortinet PSIRT • Apr 14, 2026

MEDIUM

Arbitrary directory delete on vmimages delete feature

Fortinet PSIRT • Apr 14, 2026

HIGH

Ubiquiti defect poses account takeover risk for UniFi Networking Application users

CyberScoop • Mar 20, 2026

MEDIUM

Path traversal vulnerability in FortiSOAR Agent Connector Bridge server

Fortinet PSIRT • Mar 10, 2026

HIGH

Valmet DNA Engineering Web Tools

CISA All Advisories • Feb 19, 2026

HIGH

Six flaws found hiding in OpenClaw’s plumbing

CSO Online • Feb 19, 2026

HIGH

Researchers Reveal Six New OpenClaw Vulnerabilities

Infosecurity Magazine • Feb 19, 2026

CRITICAL

U.S. CISA adds a flaw in Gogs to its Known Exploited Vulnerabilities catalog

Web Discovery • Feb 09, 2026

HIGH

VU#504749: PyMuPDF path traversal and arbitrary file write vulnerabilities

CERT/CC • Feb 12, 2026

CRITICAL

CVE-2025-59099: The Access Manager is using the open source web server CompactWebServer written in C#. This web serv...

NIST NVD • Jan 26, 2026