CVE-2026-16053
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerabilit
CVSS
8.5
Alto
EPSS
1.0%
p59
KEV
—
Exploit Today
18
0-100
Publicado: 11 ago 2026 · Última mod.: 11 ago 2026 · CWE-23
Sin historial EPSS suficiente todavía.
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-162309.8 CRÍ—
——0The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the delete_file function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an attacker-controlled filename in the item_meta[field_id][content] parameter alongside the delete_saved_image flag during the standard entry-creation POST flow on any form that accepts anonymous submissions.8hCVE-2026-703378.8 ALT—
——0Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.1dCVE-2026-658107.8 ALT—
——0Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.15hCVE-2026-628376.5 MED—
——0Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.1dCVE-2026-534167.1 ALT—
——0Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access.2dCVE-2026-21082—3.5%
——1Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.2d