Skip to content
Product
Use it
Threat intelligence API
Free key, 70+ endpoints, OpenAPI. The product.
Get started
Pick your stack, make your first call.
Live feed
The console: incidents, filters, entities, search.
Recipes
Runnable examples for the free key.
Free feeds
RSS, ransomware feed, IOC blocklist, MISP — no key.
CLI & agents
tc from a terminal; agent keys with scoped budgets.
The data
Incident records
900 articles a day become ~70 scored incidents.
Dark web
First-party leak-site collection: victims, groups, markets.
Validated IOCs
Indicators with a false-positive gate; STIX, MISP, CSV.
Vulnerabilities
CVEs with EPSS, KEV and exploit status.
Entity graph
Actors, malware, CVEs, companies — pivotable.
For teams
For service providers
Per-client feeds, alerts and branded digests.
Use cases
How teams and builders use the corpus.
About ThreatCluster
What it is and how it is built.
Pricing
Docs
Reference
OpenAPI (Swagger)
Every endpoint, parameter and response model.
ReDoc
The same reference, long-form.
Examples on GitHub
curl, Python and Node quickstarts; daily spec snapshot.
Guides
Quickstart & plans
Key, scopes, budgets, tiers.
Integrations
Splunk, Sentinel, Elastic, agents and terminals, step by step
Export formats
STIX 2.1, MISP, CSV, text.
CLI setup
Install, log in, wire an agent.
No results found
Sign in
Get a free key
No results found
Product
Threat intelligence API
Get started
Live feed
Recipes
Free feeds
CLI & agents
The data
Incident records
Dark web
Validated IOCs
Vulnerabilities
Entity graph
For teams
For service providers
Use cases
About ThreatCluster
Docs
OpenAPI (Swagger)
ReDoc
Examples on GitHub
Quickstart & plans
Integrations
Export formats
CLI setup
Pricing
Contact
Get a free key
Sign in
Back
Path Traversal
Vulnerability
Threat entity extracted from intelligence sources
Sep 5: 0 mentions
Sep 6: 0 mentions
Sep 7: 1 mention
Sep 8: 1 mention
Sep 9: 0 mentions
Sep 10: 3 mentions
Sep 11: 2 mentions
Sep 5
Sep 8
Sep 11
Entities
›
vulnerability
›
Path Traversal
Frequency
50
occurrences
First Seen
October 29, 2025
Last Seen
September 11, 2026
API
Overview
Recent Events
Profile
Profile
MITRE ATT&CK
1 / 2
Exploited By
Gamaredon
Anubis Ransomware Group
LockBit Black
Associated Malware
Amadey
AsyncRAT
DOILoader
GammaWorm
Hijackloader
IDAT Loader
MaskGramStealer
RedLine Stealer
Tools Used
7-Zip
Calc.exe
Claude
GitHub Actions
GitHub Agentic Workflows
JavaScript
LiteLLM
Python
Related CVEs
CVE-2026-49235
CVE-2026-49232
CVE-2026-49233
CVE-2026-49234
CVE-2026-78435
CVE-2026-32147
CVE-2026-22557
CVE-2026-16531
MITRE Techniques
T1059 - Command and Scripting Interpreter
T1071 - Application Layer Protocol
T1190 - Exploit Public-Facing Application
T1505.003 - Web Shell
Cross-Site Scripting (xss)
T1068 - Exploitation for Privilege Escalation
Insecure Direct Object Reference
T1041 - Exfiltration Over C2 Channel
Campaigns
GammaPhish
Operation Endgame
Affected Platforms
Linux
PHP
GitHub
Ivanti Endpoint Manager
Windows
ABAP
Regions
Russia
Sectors Affected
Finance
Government
Healthcare
-
REC
Recon
No techniques detected
-
RD
Resource Dev
No techniques detected
1
IA
Initial Access
T1190 - Exploit Public-Facing Application
2
EX
Execution
T1059 - Command and Scripting Interpreter
T1053 - Scheduled Task/Job
3
PE
Persistence
T1505.003 - Web Shell
T1136 - Create Account
T1547 - Boot Or Logon Autostart Execution
1
PE
Priv Esc
T1068 - Exploitation for Privilege Escalation
-
DE
Defense Evasion
No techniques detected
-
CA
Cred Access
No techniques detected
-
DI
Discovery
No techniques detected
-
LM
Lateral Mov
No techniques detected
-
CO
Collection
No techniques detected
1
C2
C2
T1071 - Application Layer Protocol
1
EX
Exfil
T1041 - Exfiltration Over C2 Channel
-
IM
Impact
No techniques detected
9
techniques detected across
6
tactics
Related Clusters (45)
CISA Directs Agencies to Address Gogs RCE Vulnerability Exploited in Zero-Day Attacks
Jan 12
·
6 sources
95
FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation
Nov 15
·
100 sources
80
Gamaredon Exploits WinRAR Vulnerability in Ongoing Ukraine Campaign
Jun 2
·
7 sources
80
Operation Endgame Disrupts Evil Corp's SocGholish Malware Network
Jun 18
·
67 sources
78
Critical Command Injection and DoS Vulnerabilities in openSUSE pcp
Aug 6
·
12 sources
77
Multiple Critical Vulnerabilities Exploited in SonicWall and SharePoint Systems
Jul 28
·
2 sources
75
Multiple CVEs Disclosed on September 8, 2026, Affecting Microsoft Products
3d ago
·
927 sources
74
Critical Security Flaws in Fedora RPKI and Syslog Components
Jul 22
·
9 sources
74
Critical Ubiquiti UniFi Vulnerabilities Enable Account Takeover
Mar 19
·
7 sources
73
Critical CVE-2026-57331 Allows Arbitrary File Deletion in Videochat Plugin
Jun 29
·
3 sources
73
Critical Vulnerabilities in Dell Wyse Management Suite Enable Remote Code Execution
Jun 29
·
4 sources
73
Multiple CVEs Expose Vulnerabilities in Cybersecurity Tools and Applications
4d ago
·
29 sources
73
Critical SAP Vulnerabilities Require Immediate Patching
Jun 9
·
8 sources
72
OpenWrt Releases Critical Security Updates for DHCPv6 Vulnerabilities
Jul 29
·
4 sources
72
Critical Path Traversal Vulnerability in Sympa Affects Ubuntu Users
Jul 15
·
2 sources
72
Critical Path Traversal Vulnerabilities in Fedora Composer 2026
Jul 11
·
2 sources
72
Multiple Python Security Flaws Addressed in SUSE Updates
Apr 15
·
7 sources
71
Critical XSS and Path Traversal Vulnerabilities in IBM WebSphere Application Server
Jul 6
·
2 sources
71
Critical RCE and Path Traversal Vulnerabilities Found in SGLang Framework
May 18
·
2 sources
69
Multiple Vulnerabilities Discovered in Splunk Products Affecting Security Integrity
Aug 20
·
8 sources
68
Critical Vulnerabilities Found in Thousands of MCP Servers
Jul 7
·
14 sources
67
GitLab Patches Critical Vulnerabilities for File Read and Remote Code Execution
8h ago
·
3 sources
66
BaserCMS CSV Injection Vulnerability Disclosed
Aug 3
·
2 sources
65
High-Risk Vulnerabilities Discovered in ICEcoder
1d ago
·
2 sources
65
ChatGPT Vulnerability Allows Access to System Files via Download Mechanism
Jul 3
·
2 sources
58
SUSE Linux Micro libzypp Vulnerabilities Addressed in Recent Updates
Jun 12
·
4 sources
57
Path Traversal Vulnerability in Faveo Helpdesk Disclosed
Aug 26
·
3 sources
57
Critical AdonisJS Vulnerability Exposes Servers to Remote File Write Attacks
Jan 6
·
3 sources
52
OpenAI Launches GPT-5.4-Cyber Amidst Cybersecurity Arms Race
Apr 14
·
1370 sources
52
Apache Tomcat Vulnerabilities CVE-2025-55752 and CVE-2025-55754 Disclosed
Oct 29
·
2 sources
47
SUSE and openSUSE Address Erlang Path Traversal Vulnerability
Sep 3
·
2 sources
46
Critical Vulnerability in Ivanti Endpoint Manager Requires Immediate Patching
Dec 10
·
6 sources
45
Critical Apache Tomcat Vulnerabilities CVE-2025-55752 and CVE-2025-55754 Disclosed
Oct 29
·
2 sources
44
Path Traversal Vulnerabilities in Knowns Affecting Multiple Versions
18h ago
·
2 sources
43
Critical Vulnerability CVE-2025-11001 in 7-Zip Under Active Exploitation
Nov 20
·
4 sources
42
Snyk VulnBench JS 1.0 Reveals Inconsistencies in LLM Security Findings
Jun 29
·
2 sources
40
Icecoder Vulnerabilities: Path Traversal and OS Command Injection Discovered
1d ago
·
2 sources
40
Benchmarking Claude Fable 5 Reveals Harness Impact on Security Outcomes
Jun 18
·
2 sources
40
Exploitation of 7-Zip Vulnerability CVE-2025-11001 Confirmed
Nov 20
·
4 sources
36
Exploiting File Upload Vulnerabilities: A Guide for Bug Bounty Hunters
Apr 11
·
2 sources
34
Critical Vulnerabilities in Fortinet FortiWeb Actively Exploited
Nov 28
·
74 sources
33
Critical RCE Vulnerability in BeyondTrust Remote Support and PRA
Feb 7
·
717 sources
30
Multiple CVEs Disclosed: CVE-2026-14619 and CVE-2026-59102
Jul 4
·
2 sources
28
Wiz Launches New Security Features at re:Invent 2025
Dec 3
·
2 sources
22
Cloudflare Patches Critical WAF Bypass Vulnerability
Jan 20
·
5 sources
21
Prev
1 / 9
Next
Related Articles (50)
Patch Release Gitlab 19 3 2 Released
docs.gitlab.com
·
1h ago
Knowns Through 0.33.0 Path Traversal Via Template Engine
www.vulncheck.com
·
18h ago
Icecoder Through 8.1 Path Traversal Via Ineffective File Check Confinement
www.vulncheck.com
·
1d ago
CVE Alert: CVE-2026-64836 – ICEcoder
Redpacketsecurity
·
1d ago
Knowns Before 0.30.0 Path Traversal Via Document Api
www.vulncheck.com
·
1d ago
CVE-2026
Api.Msrc.Microsoft
·
3d ago
CVE-2026-22557-Path-Traversal-Ubiquti
Sploitus
·
4d ago
openSUSE Erlang Moderate Path Traversal Issue Fix 2026-3951
Linuxsecurity
·
Sep 3
SUSE Erlang Moderate Path Traversal Vulnerability Update 2026-3951
Linuxsecurity
·
Sep 3
Faveo Helpdesk Logo SettingsController.php unlink path traversalA vulnerabili... CVE: New / 22h The project was informed of the problem early through an issue report but has not responded yet. Affected is the function unlink of the file app/Http/Controllers/Admin/helpdesk/SettingsController.php of the component Logo Handler.
cve.threatint.com
·
Aug 26
CVE-2026-78435 - Exploits & Severity
Feedly
·
Aug 25
SVD-2026-0804: Security Hardening Release for Splunk SOAR - August 2026 Splunk Security Announcements / 19h In Splunk SOAR versions below 8.6.0, an authenticated user with no role assigned could submit a crafted file path to the Representational State Transfer (REST) API and execute arbitrary code. In Splunk SOAR versions below 8.6.0, a user who holds the Administrator role could use path traversal in the Universal Forwarder installer’s archive extraction to write files outside the intended inst
advisory.splunk.com
·
Aug 20
74
cwe.mitre.org
·
Aug 17
openSUSE 2026-3505
Linuxsecurity
·
Aug 6
openSUSE Severe pcp Command Injection DoS Privilege Escalation 2026-3507
Linuxsecurity
·
Aug 6
JVN 94952030
basercms.net
·
Aug 3
CVE-2026-65921
nvd.nist.gov
·
Jul 30
OpenWrt releases security updates for critical DHCPv6 flaw and other vulnerabilities
Scworld
·
Jul 29
Daily Threat Brief: July 27, 2026
Buttondown
·
Jul 28
Fedora 43 rust-fern Important Path Traversal Fix Advisory 2026
Linuxsecurity
·
Jul 22
Fedora 44 rust-rpki Important Security Fixes 2026
Linuxsecurity
·
Jul 22
Fedora 44 rust-syslog Severe Path Traversal Vulnerability 2026
Linuxsecurity
·
Jul 22
USN-8552-1: Sympa vulnerability
Ubuntu
·
Jul 15
Fedora 43 Composer Important Path Traversal Security Fix 2026
Linuxsecurity
·
Jul 11
Trend AI Security
www.trendaisecurity.com
·
Jul 8
IBM WebSphere Application Server Hit by Critical XSS and Path Traversal Vulnerabilities
Gbhackers
·
Jul 6
ChatGPT File Download Flow Vulnerability Could Be Abused to Access System Files
Cybersecuritynews
·
Jul 2
CVE-2026-57331 - Exploits & Severity
Feedly
·
Jun 29
CVE 2026 49506
nvd.nist.gov
·
Jun 29
Snyk VulnBench JS 1.0: LLM Bug Repeatability
Snyk
·
Jun 29
Snyk VulnBench JS 1.0: LLM Bug Repeatability
Snyk
·
Jun 29
StealC you later: Proofpoint and IBM X
Ibm
·
Jun 24
Claude Fable 5, take two: same model, different harness, and a very different result
Endorlabs
·
Jun 18
SUSE Linux Micro 6.1 Libzypp Moderate Directory Traversal Flaw 2026-22073
Linuxsecurity
·
Jun 12
SAP Patchday: Critical vulnerabilities in SAP NetWeaver and other weaknesses
Heise.De
·
Jun 9
FSB Group Gamaredon Hides Worm in Windows Data Streams
Infosecurity-Magazine
·
Jun 1
VU#777338: SGLang contains two remote code execution and one path traversal vulnerability
Kb.Cert
·
May 18
SUSE Linux 12 SP5 Python 36 Significant Path Traversal C Stack Overflow
Linuxsecurity
·
Apr 15
Bug Bounty Bootcamp 32 Weaponizing File Uploads From Profile Pictures To Remote Code F582eb579c85
medium.com
·
Apr 11
Critical Ubiquiti UniFi Vulnerabilities Allow Attackers to Seize Full Control of Underlying Systems
Cybersecuritynews
·
Mar 19
Cloudflare Fixes Zero
Linkedin
·
Jan 19
Fed agencies urged to ditch Gogs as zero-day makes CISA list
Theregister
·
Jan 13
Critical AdonisJS Vulnerability Allows Remote Attackers to Write Files on Servers
Cyberpress
·
Jan 6
Ivanti Patches Critical Security Vulnerability in Endpoint Manager
Heise.De
·
Dec 10
CC-4726
Digital.Nhs.Uk
·
Dec 10
Introducing Wiz SAST: Where Code Risk Meets Cloud Context
Wiz
·
Dec 2
7-Zip: Attackers Inject Malicious Code
Heise.De
·
Nov 20
Fortinet 'fesses up to second 0
Theregister
·
Nov 19
Fortinet: New Exploit Abuses Zero-Day Vulnerability in Firewalls
Heise.De
·
Nov 14
Apache Tomcat Path Traversal Vulnerability (CVE-2025-55752) Notice
Securityboulevard
·
Oct 29
Prev
1 / 10
Next
Related Entities
Gamaredon
Zero-day Exploit
Command Injection
Sql Injection
Denial of Service
Remote Code Execution
Data Breach
Code Injection
DDoS
Privilege Escalation
Malware
Authentication Bypass
