CVE-2026-23734
XWiki Platform is a generic wiki platform. Versions prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17 allow access to read configuration f
CVSS
—
Sem CVSS
EPSS
18.5%
p97
KEV
—
Exploit Today
29
0-100
Publicado: 20 de mai. de 2026 · Última mod.: 23 de jul. de 2026 · CWE-23
18.5%EPSS · 30 dias19.6%
2026-10-142026-11-11
XWiki Platform is a generic wiki platform. Versions prior to 18.1.0-rc-1, 17.10.3, 17.4.9, and 16.10.17 allow access to read configuration files by using URLs such as http://localhost:8080/bin/ssx/Main/WebHome?resource=/../../WEB-INF/xwiki.cfg&minify=false, leading to Path Traversal. The vulnerability is can be exploited via resources parameter the ssx and jsx endpoints by using leading slashes. This issue has been patched in 18.1.0-rc-1, 17.10.3, 17.4.9, 16.10.17.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-120495——
——0Path traversal in the Synthetic Monitoring "Robotmk" test service of Checkmk <2.5.0p19, <2.4.0p40, and 2.3.0 (EOL) allows an attacker who controls the agent output of a monitored host's check output for a host to inject a crafted robot output to define the contents and location for the generated HTML log, leading to code execution as the site user.19hCVE-2026-125882—46.3%
——14Relative path traversal vulnerability in N-able N-central allows Path Traversal.
This issue affects N-central: before 26.4.1.1dCVE-2026-1182135.9 MÉD58.8%
——18Relative path traversal in Windows Deployment Services allows an unauthorized attacker to disclose information over a network.1dCVE-2026-1138186.5 MÉD66.9%
——20Relative path traversal in Windows Deployment Services allows an authorized attacker to disclose information over a network.1dCVE-2026-1127628.8 ALT61.9%
——19Relative path traversal in Windows Print Spooler Components allows an unauthorized attacker to elevate privileges over a network.1dCVE-2026-1055057.8 ALT32.3%
——10Relative path traversal in Microsoft Input Method Editor (IME) allows an authorized attacker to elevate privileges locally.1d