CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Cisco Secure Email Gateway AMP Arbitrary File Write and Root RCE Vulnerability (CVE-2026-76519)
[Affected Scope] All versions of Cisco Secure Email Gateway with Advanced Malware Protection (AMP) and File Reputation service enabled.
[Impact] An unauthenticated remote attacker can overwrite system files and execute arbitrary commands with root privileges by sending a crafted email attachment.
[Mitigation] Immediately apply the official AsyncOS security patches provided by Cisco. If patching is not possible, disable the AMP File Reputation feature as a temporary workaround.
Trend Micro Apex One On-Premise Directory Traversal and Remote Code Execution Vulnerability (CVE-2026-34926)
[Affected Scope] Trend Micro Apex One (On-Premise) server installations.
[Impact] A local attacker with administrative credentials can modify key tables via directory traversal to inject and deploy malicious code to connected agents.
[Mitigation] Apply the official security patches provided by Trend Micro immediately and restrict administrative access to the server.
Fortinet FortiWeb Relative Path Traversal Remote Code Execution Vulnerability Urgent Security Advisory (CVE-2025-64446)
[Affected Scope] Fortinet FortiWeb versions 8.0.0 through 8.0.1, 7.6.0 through 7.6.4, 7.4.0 through 7.4.9, 7.2.0 through 7.2.11, and 7.0.0 through 7.0.11
[Impact] Unauthenticated remote attackers can execute arbitrary administrative commands on the system via crafted HTTP or HTTPS requests
[Mitigation] Immediately upgrade to the official patched versions (8.0.2, 7.6.5, 7.4.10, 7.2.12, 7.0.12 or higher)
JetBrains TeamCity Path Traversal and Authentication Bypass Vulnerability (CVE-2024-27199) Analysis and Mitigation Guide
[Affected Scope] JetBrains TeamCity on-premises servers prior to version 2023.11.4
[Impact] Unauthenticated attackers can bypass authentication via path traversal, allowing them to perform limited administrative actions (e.g., modifying system configurations, creating rogue accounts)
[Mitigation] Immediately upgrade TeamCity to version 2023.11.4 or later, or apply the official security patch plugin
Aviatrix Controller 6.x Unauthenticated Remote Code Execution (RCE) and Directory Traversal Vulnerability (CVE-2021-40870) Analysis & Mitigation Guide
[Affected Scope] Aviatrix Controller 6.x versions prior to 6.5-1804.1922
[Impact] Unauthenticated remote attackers can execute arbitrary code with system privileges by exploiting directory traversal and unrestricted file upload vulnerabilities
[Mitigation] Immediately upgrade Aviatrix Controller to version 6.5-1804.1922 or later, and restrict external access to the management interface
Spring Cloud Config Server Directory Traversal Arbitrary File Read Vulnerability (CVE-2020-5410) Analysis and Mitigation Guide
[Affected Scope] Spring Cloud Config Server versions 2.2.x prior to 2.2.3, and 2.1.x prior to 2.1.9
[Impact] Unauthenticated remote attackers can exploit a directory traversal vulnerability to read arbitrary configuration and system files from the server
[Mitigation] Immediately upgrade Spring Cloud Config Server to version 2.2.3, 2.1.9, or higher, and restrict network access