Absolute Path Traversal

CWE-36 · 5 records · 1 with a public proof-of-concept

Records the NVD classes as Absolute Path Traversal (CWE-36), highest CVSS first.

  1. HIGH 8.8CVE-2026-837842026-10-13

    Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 8.8CVE-2026-702972026-10-13

    Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.

    AI risk analysis on Exploit-DB.ai →

  3. HIGH 8.1CVE-2026-837462026-10-13

    Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.

    AI risk analysis on Exploit-DB.ai →

  4. HIGH 7.5CVE-2026-61891public PoC2026-08-05

    In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem` backend exposes HTTP file-download endpoints (`GET /file`, `GET /files/`, `PUT /files/`) that convert a client-supplied URI directly to a filesystem path and stream the file, without…

    theia

    AI risk analysis on Exploit-DB.ai →

  5. MEDIUM 6.5CVE-2026-836832026-10-13

    Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.

    AI risk analysis on Exploit-DB.ai →