CVE-2026-70297
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
CVSS
8.8
Alta
EPSS
1.2%
p67
KEV
—
Exploit Today
20
0-100
Publicado: 13 de out. de 2026 · Última mod.: 13 de out. de 2026 · CWE-36
1.0%EPSS · 30 dias1.2%
2026-10-142026-11-05
Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to execute code over a network.
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-1166356.1 MÉD24.3%
——7Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server (aws-serverless-mcp-server) before v0.2.1 might allow an actor who can influence the MCP agent to read the contents of JSON files outside the intended deployment status directory. Where write access has been enabled, to create or overwrite JSON files outside that directory. This issue is reachable through directory traversal sequences or an absolute path supplied in the project name input.
To remediate this issue, users should upgrade to version v0.2.1.3dCVE-2026-1186934.7 MÉD3.5%
——1CherryTree through 1.7.2 contains a path traversal vulnerability in CtStorageXmlHelper::_create_image_from_xml that trusts unvalidated embedded-file 'filename' attributes in XML documents. Attackers can craft a .ctd, .ctz, or .ctx document with an absolute or ~/ filename and no data, so saving embeds files like ~/.ssh/id_rsa into the document.3dCVE-2026-837848.8 ALT65.3%
——20Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to elevate privileges over a network.7dCVE-2026-837468.1 ALT66.9%
——20Absolute path traversal in Skype for Business and Microsoft Lync allows an authorized attacker to elevate privileges over a network.23dCVE-2026-836836.5 MÉD70.2%
——21Absolute path traversal in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information over a network.7dCVE-2026-55062—5.7%
——2uniget is a universal installer and updater for (container) tools. Prior to 0.27.6, the hooks edit command in cmd/uniget/hooks.go concatenates an unvalidated hook filename with the selected hooks directory, allowing parent-directory components to escape that directory. The resulting path is passed to the configured editor, which can access or modify files outside the hooks directory with the privileges of the uniget process account. This issue is fixed in version 0.27.6.43d