CWE-284 (2608) CWE-79 (1775) CWE-416 (1278) CWE-862 (1126) CWE-89 (1088) CWE-22 (1003) CWE-125 (861) CWE-200 (836) CWE-306 (831) CWE-122 (821) CWE-20 (785) CWE-78 (697) CWE-918 (680) CWE-787 (674) CWE-94 (626) CWE-863 (600) CWE-74 (599) CWE-639 (530) CWE-400 (510) CWE-269 (499) CWE-119 (493) CWE-770 (428) CWE-502 (422) CWE-287 (419) CWE-121 (403) CWE-77 (371) CWE-190 (360) CWE-362 (319) CWE-352 (270) CWE-285 (240)

CWE-24

6 CVEs View on MITRE →
CVE Severity CVSS EPSS Published Description Flags
CVE-2026-39813 critical 9.8 0.2222 2026-04-14 A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSand
CVE-2026-41082 high 7.8 0.0021 2026-04-16 In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach
CVE-2026-118485 high 7.0 — 2026-10-28 Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (http_decode()) on the o
CVE-2026-44942 medium 6.5 0.0042 2026-06-18 A path traversal in handling the "path" component of .repo files processed by libzypp before 17.38.1
CVE-2026-48047 medium 5.9 0.0065 2026-08-07 XWiki Platform WebJars API is a package for XWiki, a generic wiki platform. Starting with version 9.
CVE-2026-90721 low 3.4 0.0012 2026-10-28 Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version