Path Traversal

Everything Patch Gazette has reported about Path Traversal: 2 stories, newest first. Part of our Vulnerabilities coverage.

Adobe ColdFusion Users Urged to Enable Production Secure Profile Against Critical Unauthenticated File Read

Unauthenticated attackers can read files via ColdFusion RDS. Adobe advises disabling the feature or using Production Secure Profile to mitigate risk.

Oct 14, 2026

A critical path traversal flaw in gvproxy allows attackers to delete files on the host system via an unvalidated socket path parameter.

Oct 9, 2026