Loading feed…
Fortinet Multiple Products Path Traversal Vulnerability
CISA has added two new vulnerabilities to its known-exploited catalogue, based on evidence of active exploitation.
Confirm whether FortiOS is in your estate.
all High · vulnerabilities · exploited in the wild
Updated
Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.
RARLAB WinRAR contains a path traversal vulnerability allowing an attacker to execute code in the context of the current user. Known-exploited catalogue reports exploitation in the wild.
Versa Concerto SD-WAN orchestration platform contains an improper authentication vulnerability in the Traefik reverse proxy configuration, allowing at attacker to access administrative endpoints.
Cisco SD-WAN CLI contains a path traversal vulnerability that could allow an authenticated local attacker to gain elevated privileges via improper access controls on commands within the application…
CISA has added two new vulnerabilities to its known-exploited catalogue, based on evidence of active exploitation.
Next step: Confirm whether FortiOS is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 2Vendor statement missing. no VendorResearcher coverage missing. no Researcher2 signals
Only official coverage so far. Treat as an early signal.
Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system.
Next step: Confirm whether Cisco Secure Email Gateway Virtual Appliance C100v is in your estate.
Who's reporting
1 of 3 perspectives
Official authority: Official 1Vendor statement missing. no VendorResearcher coverage missing. no Researcher1 signal
Only official coverage so far. Treat as an early signal.
RARLAB WinRAR contains a path traversal vulnerability affecting the Windows version of WinRAR. Known-exploited catalogue reports exploitation in the wild.
Grafana contains a path traversal vulnerability that could allow access to local files. Known-exploited catalogue reports exploitation in the wild.
Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutContents API that could allow for code execution. Known-exploited catalogue reports exploitation in the wild.
The King sent a message for the National Cyber Security Centre's 10th anniversary, highlighting its role in safeguarding democratic institutions.
Kentico Xperience contains a path traversal vulnerability that could allow an authenticated user's Staging Sync Server to upload arbitrary data to path relative locations.
SimpleHelp contains a path traversal vulnerability that allows admin users to upload arbitrary files anywhere on the file system by uploading a crafted zip file (i.
Our view of good cyber adversary simulation – and how assured providers can deliver it.
GitLab Community Edition and Enterprise Edition have released updated versions to address two critical vulnerabilities, CVE-2026-85706 and CVE-2026-87719, which were originally patched on 10… Known-exploited catalogue…
Ryan Davis went from hacking his school's network to running security at Ryan Davis became interested in computers at an early age, before the internet changed the world.
A path traversal vulnerability in.NET allows an authorised attacker to locally elevate privileges.