CVE-2026-88136High· 8.8▾ TwilightImproper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-70184High· 7.8Improper resolution of path equivalence in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
CVE-2026-108463High· 8.8Improper resolution of path equivalence in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-102231High· 7.7Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-102217High· 8.8Improper resolution of path equivalence in WebDAV allows an authorized attacker to elevate privileges over a network.
CVE-2025-58290Low· 3.3Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
CVE-2026-79768Medium· 5.3Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when configured with absolute non-wildcard UserDir directive (the 2nd form in https://httpd.apache.org/docs/2.4/mod/mod_userdir.html#…