CWE-41 · 33 kayıt

Improper Resolution of Path Equivalence

Bu sınıftaki CVE’ler

33 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2026-85978İstismar yok	Unauthenticated Remote Code Execution in Akana API Platformperforce · akana · CWE-41 pre-auth RCE Kimlik doğrulama atlatma	Kritik10,0	—	%1,4	9 Eyl 2026
35İzleyin	CVE-2025-21332İstismar yok	MapUrlToZone Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1507 · CWE-41 Kimlik doğrulamasız	Yüksek8,8	—	%1,5	14 Oca 2025
34İzleyin	CVE-2025-24470İstismar yok	An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0fortinet · fortiportal · CWE-41 Kimlik doğrulamasız	Yüksek8,6	—	%1,3	11 Şub 2025
33İzleyin	CVE-2026-57441İstismar yok	MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalencebitbonsai · mcpvault · CWE-41	Yüksek8,4	—	%0,2	15 Eyl 2026
33İzleyin	CVE-2026-49401İstismar yok	Deno Permission Bypass via Unicode Normalization Mismatch on macOS (APFS)deno · deno · CWE-41	Yüksek8,4	—	%0,2	23 Haz 2026
32İzleyin	CVE-2023-36396İstismar yok	Windows Compressed Folder Remote Code Execution Vulnerabilitymicrosoft · windows 11 22h2 · CWE-41 RCE	Yüksek7,8	—	%1,7	14 Kas 2023
32İzleyin	CVE-2026-5816İstismar yok	Improper Resolution of Path Equivalence in GitLabgitlab · gitlab · CWE-41 pre-auth RCE	Yüksek8,1	—	%0,6	22 Nis 2026
31İzleyin	CVE-2024-30073İstismar yok	Windows Security Zone Mapping Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1507 · CWE-41	Yüksek7,8	—	%0,9	10 Eyl 2024
31İzleyin	CVE-2025-43298İstismar yok	A parsing issue in the handling of directory paths was addressed with improved path validation.apple · macos · CWE-41 Yerel yetki yükseltme	Yüksek7,8	—	%0,2	15 Eyl 2025
30İzleyin	CVE-2026-23674İstismar yok	MapUrlToZone Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1607 · CWE-41 Kimlik doğrulamasız	Yüksek7,5	—	%1,2	10 Mar 2026
30İzleyin	CVE-2026-72835İstismar yok	filebrowser before v2.63.21 Access Rule Bypass via Path Canonicalizationfilebrowser · filebrowser · CWE-41	Yüksek7,6	—	%0,5	14 Ağu 2026
29İzleyin	CVE-2024-8765İstismar yok	Improper Path Equivalence Resolution in lunary-ai/lunarylunary · lunary · CWE-41 Kimlik doğrulamasız	Yüksek7,3	—	%0,8	20 Mar 2025
27İzleyin	CVE-2024-30036İstismar yok	Windows Deployment Services Information Disclosure Vulnerabilitymicrosoft · windows server 2008 · CWE-41	Orta6,5	—	%2,3	14 May 2024
27İzleyin	CVE-2026-34510İstismar yok	OpenClaw < 2026.3.22 - Remote File URL Acceptance in Windows Media Loadersopenclaw · openclaw · CWE-41 Kimlik doğrulamasız Yol geçişi	Orta6,9	—	%0,5	1 Nis 2026
27İzleyin	CVE-2025-0115İstismar yok	PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLIpalo alto networks · pan-os · CWE-41	Orta6,8	—	%0,2	12 Mar 2025
26İzleyin	CVE-2023-46169İstismar yok	IBM DS8900F file manipulationibm · ds8900f firmware · CWE-41	Orta6,5	—	%0,5	7 Mar 2024
24İzleyin	CVE-2022-0855İstismar yok	Improper Resolution of Path Equivalence in microweber-dev/whmcs_pluginmicroweber · whmcs · CWE-41 Kimlik doğrulamasız	Orta6,1	—	%1,0	4 Mar 2022
24İzleyin	CVE-2024-45405İstismar yok	gix-path improperly resolves configuration path reported by Gitbyron · gitoxide · CWE-41	Orta6,0	—	%0,3	6 Eyl 2024
22İzleyin	CVE-2025-58290İstismar yok	Denial of service (DoS) vulnerability in the office service.huawei · harmonyos · CWE-41 Hizmet dışı bırakma	Orta5,5	—	%0,1	11 Eki 2025
21İzleyin	CVE-2023-45284İstismar yok	Incorrect detection of reserved device names on Windows in path/filepathgolang · go · CWE-41 Kimlik doğrulamasız	Orta5,3	—	%0,9	9 Kas 2023
21İzleyin	CVE-2024-6839İstismar yok	Improper Regex Path Matching in corydolphin/flask-corsflask-cors project · flask-cors · CWE-41 Kimlik doğrulamasız	Orta5,3	—	%0,7	20 Mar 2025
21İzleyin	CVE-2026-66064İstismar yok	goshs has ACL Bypass & Path Traversalgoshs-labs · goshs · CWE-41 Kimlik doğrulamasız Yol geçişi	Orta5,3	—	%0,4	28 Tem 2026
21İzleyin	CVE-2026-93709İstismar yok	Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handlerCWE-41 Kimlik doğrulamasız	Orta5,3	—	%0,3	21 Eyl 2026
18İzleyin	CVE-2025-21269İstismar yok	Windows HTML Platforms Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1507 · CWE-41 Kimlik doğrulamasız	Orta4,3	—	%4,6	14 Oca 2025
18İzleyin	CVE-2025-21219İstismar yok	MapUrlToZone Security Feature Bypass Vulnerabilitymicrosoft · windows 10 1507 · CWE-41 Kimlik doğrulamasız	Orta4,3	—	%3,0	14 Oca 2025

CVE-2026-85978
40Planlayın
Unauthenticated Remote Code Execution in Akana API Platform
KritikCVSS 10,0İstismar yokEPSS %1
- pre-auth RCE
- Kimlik doğrulama atlatma
perforce · akana9 Eyl 2026
CVE-2025-21332
35İzleyin
MapUrlToZone Security Feature Bypass Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
microsoft · windows 10 150714 Oca 2025
CVE-2025-24470
34İzleyin
An Improper Resolution of Path Equivalence vulnerability [CWE-41] in FortiPortal 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0
YüksekCVSS 8,6İstismar yokEPSS %1
- Kimlik doğrulamasız
fortinet · fortiportal11 Şub 2025
CVE-2026-57441
33İzleyin
MCPVault: PathFilter restricted-directory deny-list bypass via case and trailing dot/space equivalence
YüksekCVSS 8,4İstismar yokEPSS %0
bitbonsai · mcpvault15 Eyl 2026
CVE-2026-49401
33İzleyin
Deno Permission Bypass via Unicode Normalization Mismatch on macOS (APFS)
YüksekCVSS 8,4İstismar yokEPSS %0
deno · deno23 Haz 2026
CVE-2023-36396
32İzleyin
Windows Compressed Folder Remote Code Execution Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %2
- RCE
microsoft · windows 11 22h214 Kas 2023
CVE-2026-5816
32İzleyin
Improper Resolution of Path Equivalence in GitLab
YüksekCVSS 8,1İstismar yokEPSS %1
- pre-auth RCE
gitlab · gitlab22 Nis 2026
CVE-2024-30073
31İzleyin
Windows Security Zone Mapping Security Feature Bypass Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %1
microsoft · windows 10 150710 Eyl 2024
CVE-2025-43298
31İzleyin
A parsing issue in the handling of directory paths was addressed with improved path validation.
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
apple · macos15 Eyl 2025
CVE-2026-23674
30İzleyin
MapUrlToZone Security Feature Bypass Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %1
- Kimlik doğrulamasız
microsoft · windows 10 160710 Mar 2026
CVE-2026-72835
30İzleyin
filebrowser before v2.63.21 Access Rule Bypass via Path Canonicalization
YüksekCVSS 7,6İstismar yokEPSS %1
filebrowser · filebrowser14 Ağu 2026
CVE-2024-8765
29İzleyin
Improper Path Equivalence Resolution in lunary-ai/lunary
YüksekCVSS 7,3İstismar yokEPSS %1
- Kimlik doğrulamasız
lunary · lunary20 Mar 2025
CVE-2024-30036
27İzleyin
Windows Deployment Services Information Disclosure Vulnerability
OrtaCVSS 6,5İstismar yokEPSS %2
microsoft · windows server 200814 May 2024
CVE-2026-34510
27İzleyin
OpenClaw < 2026.3.22 - Remote File URL Acceptance in Windows Media Loaders
OrtaCVSS 6,9İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
openclaw · openclaw1 Nis 2026
CVE-2025-0115
27İzleyin
PAN-OS: Authenticated Admin File Read Vulnerability in PAN-OS CLI
OrtaCVSS 6,8İstismar yokEPSS %0
palo alto networks · pan-os12 Mar 2025
CVE-2023-46169
26İzleyin
IBM DS8900F file manipulation
OrtaCVSS 6,5İstismar yokEPSS %1
ibm · ds8900f firmware7 Mar 2024
CVE-2022-0855
24İzleyin
Improper Resolution of Path Equivalence in microweber-dev/whmcs_plugin
OrtaCVSS 6,1İstismar yokEPSS %1
- Kimlik doğrulamasız
microweber · whmcs4 Mar 2022
CVE-2024-45405
24İzleyin
gix-path improperly resolves configuration path reported by Git
OrtaCVSS 6,0İstismar yokEPSS %0
byron · gitoxide6 Eyl 2024
CVE-2025-58290
22İzleyin
Denial of service (DoS) vulnerability in the office service.
OrtaCVSS 5,5İstismar yokEPSS %0
- Hizmet dışı bırakma
huawei · harmonyos11 Eki 2025
CVE-2023-45284
21İzleyin
Incorrect detection of reserved device names on Windows in path/filepath
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
golang · go9 Kas 2023
CVE-2024-6839
21İzleyin
Improper Regex Path Matching in corydolphin/flask-cors
OrtaCVSS 5,3İstismar yokEPSS %1
- Kimlik doğrulamasız
flask-cors project · flask-cors20 Mar 2025
CVE-2026-66064
21İzleyin
goshs has ACL Bypass & Path Traversal
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
- Yol geçişi
goshs-labs · goshs28 Tem 2026
CVE-2026-93709
21İzleyin
Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler
OrtaCVSS 5,3İstismar yokEPSS %0
- Kimlik doğrulamasız
21 Eyl 2026
CVE-2025-21269
18İzleyin
Windows HTML Platforms Security Feature Bypass Vulnerability
OrtaCVSS 4,3İstismar yokEPSS %5
- Kimlik doğrulamasız
microsoft · windows 10 150714 Oca 2025
CVE-2025-21219
18İzleyin
MapUrlToZone Security Feature Bypass Vulnerability
OrtaCVSS 4,3İstismar yokEPSS %3
- Kimlik doğrulamasız
microsoft · windows 10 150714 Oca 2025

Tüm zafiyet sınıfları