TI-2026-81943 CVE-2026-118485 · GHSA-gww9-3rx9-535xPath traversal in Axel Download Accelerator via URL filename decodingPriority LOW 32Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding (http_decode()) on the output filename after the URL has been parsed and the filename component extracted.CVSS 4.0HIGH 7.0· Network · No auth · User interaction · EPSS 0.0056 · Published 2026-10-28 · No fix listed CWE-24