CVE-2026-83865
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.
CVSS
4.7
Medio
EPSS
0.3%
p18
KEV
—
Exploit Today
6
0-100
Publicado: 13 oct 2026 · Última mod.: 13 oct 2026 · CWE-23
Sin historial EPSS suficiente todavía.
Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-765199.8 CRÍ—
KEV—50Cisco Secure Email Gateway Relative Path Traversal Vulnerability11hCVE-2026-1106907.5 ALT—
——0Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where the onGET handler at server/rest/index.js:130 calls the unguarded root() function instead of the root.resolve() validation wrapper used elsewhere. Attackers can send percent-encoded directory traversal sequences in the pack request path to read arbitrary files outside the configured --root directory, such as /etc/passwd or SSH private keys, which are archived and streamed back as a downloadable tar.gz file.17hCVE-2026-839238.8 ALT59.5%
——18Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.1dCVE-2026-838737.8 ALT27.3%
——8Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.1dCVE-2026-702227.8 ALT30.2%
——9Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.1dCVE-2026-699686.5 MED54.7%
——16Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.1d