CVE-2026-120495
Path traversal in the Synthetic Monitoring "Robotmk" test service of Checkmk <2.5.0p19, <2.4.0p40, and 2.3.0 (EOL) allows an attacker who co
CVSS
—
No CVSS
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Nov 11, 2026 · Last modified: Nov 11, 2026 · CWE-23
Not enough EPSS history yet.
Path traversal in the Synthetic Monitoring "Robotmk" test service of Checkmk <2.5.0p19, <2.4.0p40, and 2.3.0 (EOL) allows an attacker who controls the agent output of a monitored host's check output for a host to inject a crafted robot output to define the contents and location for the generated HTML log, leading to code execution as the site user.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-125882—46.3%
——14Relative path traversal vulnerability in N-able N-central allows Path Traversal.
This issue affects N-central: before 26.4.1.1dCVE-2026-1182135.9 MED58.8%
——18Relative path traversal in Windows Deployment Services allows an unauthorized attacker to disclose information over a network.1dCVE-2026-1138186.5 MED66.9%
——20Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a network.1dCVE-2026-1127628.8 HIG61.9%
——19Relative path traversal in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network.1dCVE-2026-1055057.8 HIG32.3%
——10Relative path traversal in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.1dCVE-2026-1240346.4 MED41.7%
——13Relative path traversal in the local hybrid job input data download in Amazon Braket SDK before 1.127.7 might allow a remote authenticated user with S3 write access to a hybrid job's input data location to overwrite arbitrary files with the privileges of the user running the job via crafted S3 object keys.
We recommend you upgrade to amazon-braket-sdk version 1.127.7 or later.2d