CWE-22 对路径名的限制不恰当(路径遍历) 类弱点 3346 条 CVE 漏洞汇总，含 AI 中文分析。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-27523 | OpenClaw 路径遍历漏洞 — OpenClaw | 6.1 | Medium | 2026-03-18 |
| CVE-2026-27522 | OpenClaw 路径遍历漏洞 — OpenClaw | 6.5 | Medium | 2026-03-18 |
| CVE-2026-22171 | OpenClaw 路径遍历漏洞 — OpenClaw | 8.2 | High | 2026-03-18 |
| CVE-2026-32981 | Ray 路径遍历漏洞 — Ray | 7.5 | High | 2026-03-17 |
| CVE-2026-25770 | Wazuh 安全漏洞 — wazuh | 9.1 | Critical | 2026-03-17 |
| CVE-2026-4307 | Agent Zero 路径遍历漏洞 — agent-zero | 4.3 | Medium | 2026-03-17 |
| CVE-2026-4285 | easegen-admin 路径遍历漏洞 — easegen-admin | 2.7 | Low | 2026-03-16 |
| CVE-2026-29522 | ZwickRoell Test Data Management 路径遍历漏洞 — Test Data Management | 7.5AI | HighAI | 2026-03-16 |
| CVE-2026-32262 | Craft CMS 路径遍历漏洞 — cms | 8.1AI | HighAI | 2026-03-16 |
| CVE-2026-4233 | ThingsGateway 路径遍历漏洞 — ThingsGateway | 4.3 | Medium | 2026-03-16 |
| CVE-2026-4222 | SSCMS 路径遍历漏洞 — SSCMS | 3.8 | Low | 2026-03-16 |
| CVE-2026-32719 | AnythingLLM 代码注入漏洞 — anything-llm | 4.2 | Medium | 2026-03-13 |
| CVE-2026-32709 | PX4-Autopilot 路径遍历漏洞 — PX4-Autopilot | 5.4 | Medium | 2026-03-13 |
| CVE-2026-2493 | IceWarp 路径遍历漏洞 — IceWarp | 7.5AI | HighAI | 2026-03-13 |
| CVE-2026-3839 | Unraid 路径遍历漏洞 — Unraid | 9.8AI | CriticalAI | 2026-03-13 |
| CVE-2026-3838 | Unraid 路径遍历漏洞 — Unraid | 8.8AI | HighAI | 2026-03-13 |
| CVE-2026-31886 | dagu 路径遍历漏洞 — dagu | 9.1 | Critical | 2026-03-13 |
| CVE-2026-30915 | SFTPGo 路径遍历漏洞 — sftpgo | 4.3 | - | 2026-03-13 |
| CVE-2026-30914 | SFTPGo 路径遍历漏洞 — sftpgo | 8.1 | - | 2026-03-13 |
| CVE-2026-30853 | Calibre 路径遍历漏洞 — calibre | 5.0 | Medium | 2026-03-13 |
| CVE-2026-4092 | Clasp 安全漏洞 — Clasp | 9.8 | - | 2026-03-13 |
| CVE-2025-66249 | Apache Livy 路径遍历漏洞 — Apache Livy | 6.5 | - | 2026-03-13 |
| CVE-2026-23942 | Erlang/OTP 安全漏洞 — OTP | 4.3 | - | 2026-03-13 |
| CVE-2026-22199 | WordPress plugin wpDiscuz 安全漏洞 — SNMP Web Pro | 7.5 | High | 2026-03-13 |
| CVE-2026-32274 | Black 路径遍历漏洞 — black | 7.5 | - | 2026-03-12 |
| CVE-2026-32232 | ZeptoClaw 安全漏洞 — zeptoclaw | 6.8AI | MediumAI | 2026-03-12 |
| CVE-2026-32140 | DataEase 路径遍历漏洞 — dataease | 8.0AI | HighAI | 2026-03-12 |
| CVE-2026-32116 | Magic Wormhole 路径遍历漏洞 — magic-wormhole | 9.8AI | CriticalAI | 2026-03-12 |
| CVE-2026-28791 | TinaCMS 路径遍历漏洞 — tinacms | 7.4 | High | 2026-03-12 |
| CVE-2026-28793 | TinaCMS 路径遍历漏洞 — cli | 8.4 | High | 2026-03-12 |
CWE-22（对路径名的限制不恰当(路径遍历)） 是常见的弱点类别，本平台收录该类弱点关联的 3346 条 CVE 漏洞。