CVE-2014-125125

A path traversal vulnerability exists in A10 Networks AX Loadbalancer versions 2.6.1-GR1-P5, 2.7.0, and earlier. The vulnerability resides in the handling of the filename parameter in the /xml/downloads endpoint, which fails to properly sanitize user input. An unauthenticated attacker can exploit this flaw by sending crafted HTTP requests containing directory traversal sequences to read arbitrary files outside the intended directory. The files returned by the vulnerable endpoint are deleted from the system after retrieval. This can lead to unauthorized disclosure of sensitive information such as SSL certificates and private keys, as well as unintended file deletion.

• CWE-22
• CWE-706

• https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/a10networks_ax_directory_traversal.rb
• https://www.exploit-db.com/exploits/31261
• https://www.vulncheck.com/advisories/a10-networks-ax-loadbalancer-path-traversal

Published

Jul 31, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-125119A filename spoofing vulnerability exists in WinRAR when open…8.4
• CVE-2014-125120Rejected reason: This CVE has the been REJECTED and will not…
• CVE-2014-125121Array Networks vAPV (version 8.3.2.17) and vxAG (version 9.2…10
• CVE-2014-125122A stack-based buffer overflow vulnerability exists in the tm…5.3
• CVE-2014-125123An unauthenticated SQL injection vulnerability exists in the…10
• CVE-2014-125124An unauthenticated remote command execution vulnerability ex…10
• CVE-2014-125126An unrestricted file upload vulnerability exists in Simple E…9.2
• CVE-2014-125127The mikecao/flight PHP framework in versions prior to v1.2 i…7.5
• CVE-2014-125128'sanitize-html' prior to version 1.0.3 is vulnerable to Cros…6.1
• CVE-2014-1252Double free vulnerability in Apple Pages 2.x before 2.1 and …
• CVE-2014-1253AppleMNT.sys in Apple Boot Camp 5 before 5.1 allows local us…
• CVE-2014-1254Apple Type Services (ATS) in Apple OS X before 10.9.2 allows…