Cybersecurity articles tagged #Path Traversal on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/cve-2026-66384-jfrog-artifactory-path-traversal-exploithttps://runtimerebel.com/blog/cve-2026-66384-jfrog-artifactory-path-traversal-exploitCISA warns of active exploitation of CVE-2026-66384 in JFrog Artifactory, allowing authenticated users to write data outside intended paths. Patch immediately.Tue, 01 Sep 2026 02:58:16 GMTCVE-2026-66384JFrog ArtifactoryPath TraversalCISA KEVSupply Chain Attackhttps://runtimerebel.com/blog/cve-2026-29059-windmill-unauthenticated-path-traversal-exploithttps://runtimerebel.com/blog/cve-2026-29059-windmill-unauthenticated-path-traversal-exploitAttackers are exploiting CVE-2026-29059 in Windmill's get_log_file endpoint to read sensitive server files without authentication. Patch immediately.Wed, 22 Jul 2026 13:59:27 GMTCVE-2026-29059WindmillPath TraversalActive Exploitationhttps://runtimerebel.com/blog/cve-2026-48282-adobe-coldfusion-path-traversal-rce-patch-nowhttps://runtimerebel.com/blog/cve-2026-48282-adobe-coldfusion-path-traversal-rce-patch-nowCISA adds actively exploited Adobe ColdFusion vulnerability [CVE-2026-48282] to KEV catalog, warning of critical remote code execution risks.Wed, 08 Jul 2026 06:30:23 GMTCVE-2026-48282Adobe ColdFusionPath TraversalRCECISA KEVActive Exploitationhttps://runtimerebel.com/blog/fortinet-fortisandbox-attackers-exploit-cve-2026-39813-39808-25089https://runtimerebel.com/blog/fortinet-fortisandbox-attackers-exploit-cve-2026-39813-39808-25089Critical Fortinet FortiSandbox vulnerabilities (CVE-2026-39813, CVE-2026-39808, CVE-2026-25089) are under active exploitation. Patch immediately.Tue, 16 Jun 2026 13:57:36 GMTFortinetFortiSandboxCVE-2026-39813CVE-2026-39808CVE-2026-25089Path TraversalActive Exploitationhttps://runtimerebel.com/blog/ivanti-sentry-cve-2023-35081-cisa-issues-urgent-3-day-patch-mandatehttps://runtimerebel.com/blog/ivanti-sentry-cve-2023-35081-cisa-issues-urgent-3-day-patch-mandateCISA adds CVE-2023-35081 to its KEV catalog, ordering federal agencies to patch Ivanti Sentry path traversal flaws to prevent remote code execution.Fri, 12 Jun 2026 09:33:30 GMTIvanti SentryCVE-2023-35081CISA KEVPath TraversalRce Chainhttps://runtimerebel.com/blog/cve-2024-5027-langflow-path-traversal-exploited-in-attackshttps://runtimerebel.com/blog/cve-2024-5027-langflow-path-traversal-exploited-in-attacksSecurity researchers observe active exploitation of CVE-2024-5027, a high-severity path traversal flaw in the Langflow AI platform allowing arbitrary file writes.Thu, 11 Jun 2026 05:41:21 GMTCVE-2024-5027LangflowAI SecurityPath TraversalRCEhttps://runtimerebel.com/blog/cve-2024-28995-solarwinds-serv-u-path-traversal-exploited-patch-nowhttps://runtimerebel.com/blog/cve-2024-28995-solarwinds-serv-u-path-traversal-exploited-patch-nowSolarWinds patches CVE-2024-28995, a high-severity path traversal flaw in Serv-U exploited in the wild. Learn how to detect and mitigate this file disclosure risk.Mon, 08 Jun 2026 09:45:15 GMTSolarWindsServ UCVE-2024-28995Path TraversalExploited in the Wildhttps://runtimerebel.com/blog/cve-2026-41551-siemens-ros-path-traversal-remediation-guidehttps://runtimerebel.com/blog/cve-2026-41551-siemens-ros-path-traversal-remediation-guideCritical path traversal vulnerability (CVE-2026-41551) in Siemens ROS# file_server allows arbitrary file access. Immediate update to v2.2.2+ is crucial.Thu, 14 May 2026 20:40:37 GMTCVE-2026-41551Siemens ROSPath TraversalCritical ManufacturingICS Securityhttps://runtimerebel.com/blog/android-dirty-stream-path-traversal-detecting-and-patching-app-exploitshttps://runtimerebel.com/blog/android-dirty-stream-path-traversal-detecting-and-patching-app-exploitsMicrosoft identifies Dirty Stream vulnerabilities in Android apps, allowing path traversal and unauthorized file manipulation. Learn how to secure your apps.Mon, 20 Apr 2026 05:08:30 GMTAndroidDirty StreamPath TraversalMobile SecurityMicrosoft Threat Intelligencehttps://runtimerebel.com/blog/cve-2024-32113-apache-ofbiz-rce-exploited-for-mirai-botnethttps://runtimerebel.com/blog/cve-2024-32113-apache-ofbiz-rce-exploited-for-mirai-botnetTechnical analysis of CVE-2024-32113 exploitation in Apache OFBiz. Learn how attackers use path traversal to deploy Mirai botnet malware and how to patch.Mon, 06 Apr 2026 05:02:01 GMTCVE-2024-32113Apache OFBizMiraiRCEPath Traversalhttps://runtimerebel.com/blog/cve-2024-50498-wing-ftp-server-exploited-in-rce-chains-patch-nowhttps://runtimerebel.com/blog/cve-2024-50498-wing-ftp-server-exploited-in-rce-chains-patch-nowCISA adds CVE-2024-50498 to its KEV catalog after reports of active exploitation. Learn how to secure Wing FTP Server versions prior to 7.5.0 from RCE chains.Mon, 16 Mar 2026 20:16:23 GMTCVE-2024-50498Wing FTPPath TraversalCISA KEVRCEhttps://runtimerebel.com/blog/cisa-adds-two-cisco-sd-wan-exploits-to-kev-cataloghttps://runtimerebel.com/blog/cisa-adds-two-cisco-sd-wan-exploits-to-kev-catalogCISA adds CVE-2022-20775 (Path Traversal) and CVE-2026-20127 (Auth Bypass) affecting Cisco SD-WAN to its Known Exploited Vulnerabilities Catalog.Wed, 25 Feb 2026 20:17:03 GMTCVE-2022-20775CVE-2026-20127Cisco Catalyst SD WANCISA KEVActive ExploitationPath TraversalAuthentication Bypasshttps://runtimerebel.com/blog/valmet-dna-engineering-web-tools-vulnerable-to-path-traversalhttps://runtimerebel.com/blog/valmet-dna-engineering-web-tools-vulnerable-to-path-traversalUnauthenticated attackers can exploit CVE-2025-15577 in Valmet DNA Engineering Web Tools to gain arbitrary file read access across critical infrastructure.Tue, 24 Feb 2026 12:25:56 GMTCVE-2025-15577ValmetICSPath TraversalCWE-22Critical ManufacturingEnergy