CVE-2026-83923
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVSS
8.8
Alto
EPSS
0.9%
p60
KEV
—
Exploit Today
18
0-100
Publicado: 13 oct 2026 · Última mod.: 13 oct 2026 · CWE-23
Sin historial EPSS suficiente todavía.
Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2026-765199.8 CRÍ—
KEV—50Cisco Secure Email Gateway Relative Path Traversal Vulnerability11hCVE-2026-1106907.5 ALT—
——0Cloud Commander (cloudcmd) versions 19.20.2 through 19.21.1 contains a path traversal vulnerability in the GET /api/v1/pack endpoint where the onGET handler at server/rest/index.js:130 calls the unguarded root() function instead of the root.resolve() validation wrapper used elsewhere. Attackers can send percent-encoded directory traversal sequences in the pack request path to read arbitrary files outside the configured --root directory, such as /etc/passwd or SSH private keys, which are archived and streamed back as a downloadable tar.gz file.17hCVE-2026-838737.8 ALT27.3%
——8Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.1dCVE-2026-838654.7 MED18.4%
——6Relative path traversal in Windows Internet (wininet.dll) allows an authorized attacker to perform tampering locally.1dCVE-2026-702227.8 ALT30.2%
——9Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.1dCVE-2026-699686.5 MED54.7%
——16Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network.1d