CVE-2026-53416
Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access.
CVSS
7.1
High
EPSS
—
KEV
—
Exploit Today
0
0-100
Published: Aug 11, 2026 · Last modified: Aug 11, 2026 · CWE-23
Not enough EPSS history yet.
Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-162309.8 CRI—
——0The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the delete_file function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an attacker-controlled filename in the item_meta[field_id][content] parameter alongside the delete_saved_image flag during the standard entry-creation POST flow on any form that accepts anonymous submissions.8hCVE-2026-703378.8 HIG—
——0Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.23hCVE-2026-658107.8 HIG—
——0Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.14hCVE-2026-628376.5 MED—
——0Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.1dCVE-2026-160538.5 HIG59.3%
——18Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module.2dCVE-2026-21082—3.5%
——1Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.2d