İçeriğe atla
Noroxi

CWE-61 · 153 kayıt

UNIX Symbolic Link (Symlink) Following

Bu sınıftaki CVE’ler

153 kayıt

  • CVE-2026-54420
    64Bu hafta

    LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP

    YüksekCVSS 8,5KEVSilahlaştırılmışEPSS %1

    litespeedtech · litespeed cpanel plugin14 Haz 2026

  • CVE-2024-54661
    39İzleyin

    readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.

    KritikCVSS 9,8İstismar yokEPSS %0

    dest-unreach · socat4 Ara 2024

  • CVE-2025-23394
    39İzleyin

    daily-backup.sh script in cyrus-imapd allows escalation from cyrus to root

    KritikCVSS 9,8İstismar yokEPSS %0

    suse · opensuse tumbleweed26 May 2025

  • CVE-2026-34078
    38İzleyin

    Flatpak has a complete sandbox escape leading to host file access and code execution in the host context

    KritikCVSS 9,3İstismar yokEPSS %1

    flatpak · flatpak7 Nis 2026

  • CVE-2026-55447
    38İzleyin

    Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit

    KritikCVSS 9,6İstismar yokEPSS %0

    langflow · langflow23 Haz 2026

  • CVE-2025-68937
    38İzleyin

    Forgejo before 13.0.2 allows attackers to write to unintended files, and possibly obtain server shell access, because of mishandling of out-

    KritikCVSS 9,5Kavram kanıtıEPSS %0

    forgejo · forgejo26 Ara 2025

  • CVE-2026-50612
    37İzleyin

    Import Symlink Following Remote Code Execution Vulnerability in QuMagie

    KritikCVSS 9,4İstismar yokEPSS %0

    qnap systems inc. · qumagie15 Eki 2026

  • CVE-2025-55345
    35İzleyin

    Unsafe symlink following in restricted workspace-write sandbox leads to RCE

    YüksekCVSS 8,8İstismar yokEPSS %0

    13 Ağu 2025

  • CVE-2024-22014
    35İzleyin

    An issue discovered in 360 Total Security Antivirus through 11.0.0.1061 for Windows allows attackers to gain escalated privileges via Symbol

    YüksekCVSS 8,8İstismar yokEPSS %0

    360totalsecurity · 360 total security15 Nis 2024

  • CVE-2026-27976
    35İzleyin

    Zed Extension Sandbox Escape via Tar Symlink Following

    YüksekCVSS 8,8İstismar yokEPSS %0

    zed · zed25 Şub 2026

  • CVE-2024-52535
    35İzleyin

    Dell SupportAssist for Home PCs versions 4.6.1 and prior and Dell SupportAssist for Business PCs versions 4.5.0 and prior, contain a symboli

    YüksekCVSS 8,8İstismar yokEPSS %0

    dell · supportassist for business pcs25 Ara 2024

  • CVE-2024-45418
    35İzleyin

    Zoom Apps for macOS - Symbolic Link Following

    YüksekCVSS 8,8İstismar yokEPSS %0

    zoom · meeting software development kit25 Şub 2025

  • CVE-2026-6475
    35İzleyin

    PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    postgresql · postgresql14 May 2026

  • CVE-2026-118688
    35İzleyin

    Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 Sandbox Escape via Symlink Rename

    YüksekCVSS 8,8İstismar yokEPSS %0

    bytecodealliance · wasmtime28 Eki 2026

  • CVE-2026-115392
    35İzleyin

    Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 Sandbox Escape via Trailing Slashes

    YüksekCVSS 8,8İstismar yokEPSS %0

    bytecodealliance · wasmtime22 Eki 2026

  • CVE-2026-56748
    34İzleyin

    Authenticated RCE via Symlink Following in Cribl Stream Pack Git Import

    YüksekCVSS 8,7İstismar yokEPSS %0

    cribl · cribl stream27 Tem 2026

  • CVE-2026-111433
    34İzleyin

    UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.

    YüksekCVSS 8,6İstismar yokEPSS %0

    openeuler · isulad2 gün önce

  • CVE-2026-41937
    34İzleyin

    Vvveb < 1.0.8.3 Unrestricted File Upload RCE via Plugin Upload

    YüksekCVSS 8,6İstismar yokEPSS %0

    givanz · vvveb14 May 2026

  • CVE-2025-57802
    34İzleyin

    Airlink's Daemon Symlink Vulnerability

    YüksekCVSS 8,7İstismar yokEPSS %0

    airlinklabs · daemon25 Ağu 2025

  • CVE-2026-12958
    34İzleyin

    Arbitrary file write in Language Servers for AWS

    YüksekCVSS 8,5İstismar yokEPSS %0

    amazon web services · language servers for aws23 Haz 2026

  • CVE-2025-46810
    34İzleyin

    A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of openSUSE Tumbleweed traefik2 allows the traefik user to escalate

    YüksekCVSS 8,5İstismar yokEPSS %0

    opensuse · tumbleweed2 Eyl 2025

  • CVE-2025-52565
    33İzleyin

    container escape due to /dev/console mount and related races

    YüksekCVSS 8,4İstismar yokEPSS %0

    linuxfoundation · runc6 Kas 2025

  • CVE-2026-49248
    33İzleyin

    OneDev: RCE through absolute-path symlink following allows low-privileged users to overwrite arbitrary server via TarUtils.untar

    YüksekCVSS 8,3İstismar yokEPSS %0

    theonedev · onedev18 Haz 2026

  • CVE-2025-33225
    33İzleyin

    NVIDIA Resiliency Extension for Linux contains a vulnerability in log aggregation, where an attacker could cause predictable log-file names.

    YüksekCVSS 8,4İstismar yokEPSS %0

    nvidia · nvidia resiliency extension16 Ara 2025

  • CVE-2026-53802
    33İzleyin

    rsync < 3.5.0 Arbitrary File Read via Symlink Following

    YüksekCVSS 8,4İstismar yokEPSS %0

    samba · rsync13 Ağu 2026

Tüm zafiyet sınıfları