CVE-2026-19909 | High | 7.5 | 2026-08-14 | PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitra… |
CVE-2026-70460 | High | 8.1 | 2026-08-13 | rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module root by exploiting symlinks within the mod… |
CVE-2026-63426 | High | 7.1 | 2026-08-13 | During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform… |
CVE-2026-53803 | High | 7.8 | 2026-08-13 | rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files by placing a symlink at a predictable ou… |
CVE-2026-53801 | Medium | 5.9 | 2026-08-13 | rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumer… |
CVE-2026-53800 | Medium | 4.7 | 2026-08-13 | rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows attackers with symlink creation access to c… |
CVE-2026-53799 | Medium | 6.3 | 2026-08-13 | rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply arbitrary ACLs or extended attributes to… |
CVE-2026-53797 | Medium | 4.7 | 2026-08-13 | rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker who can manipulate a parent di… |
CVE-2026-53796 | Medium | 6.3 | 2026-08-13 | rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the non-daemon receiver's destination directory handling th… |
CVE-2026-53795 | High | 8.1 | 2026-08-13 | rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specifying an a… |
CVE-2026-53793 | High | 7.4 | 2026-08-13 | rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by construc… |
CVE-2026-53785 | High | 7.1 | 2026-08-13 | rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination directory tree by cra… |
CVE-2026-53784 | High | 7.1 | 2026-08-13 | rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended module root when use chroot is disab… |
CVE-2026-53783 | High | 8.1 | 2026-08-13 | rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the rrsync restricted shell wrapper that allows authenticat… |
CVE-2026-15994 | High | 7.0 | 2026-08-13 | During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allo… |
CVE-2026-12036 | High | 7.1 | 2026-08-13 | An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authent… |
CVE-2026-73613 | High | 8.2 | 2026-08-13 | filebrowser versions before 2.63.19 contain an out-of-scope file deletion vulnerability in the TUS upload cache eviction mechanism that allows authenticated us… |
CVE-2026-0291 | | | 2026-08-13 | An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low… |
CVE-2026-63294 | Critical | 9.9 | 2026-08-12 | A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During the import or unpacking of crafted image… |
CVE-2026-63293 | Critical | 9.9 | 2026-08-12 | A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host system. When importing or unpacking an… |
CVE-2026-65680 | Medium | 6.7 | 2026-08-11 | Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally. |
CVE-2026-72971 | Medium | 5.5 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to p… |
CVE-2026-70348 | Medium | 5.5 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally. |
CVE-2026-62832 | High | 7.8 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-62812 | High | 7.8 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-62807 | High | 7.8 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-62803 | High | 7.8 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-62776 | High | 7.8 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-62761 | High | 7.8 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally. |
CVE-2026-61358 | High | 7.8 | 2026-08-11 | Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate… |
CVE-2026-72694 | High | 7.1 | 2026-08-11 | A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symb… |
CVE-2025-30240 | | | 2026-08-10 | The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage
devices. By placing a crafted symbolic link on supp… |
CVE-2026-63622 | High | 7.8 | 2026-08-10 | A flaw was found in libvirt. A local attacker, specifically a process running as the confined `swtpm` user, could exploit a symlink-following vulnerability in… |
CVE-2026-71964 | Medium | 6.5 | 2026-08-10 | CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager component that allows authenticated attackers to r… |
CVE-2026-70622 | Medium | 6.5 | 2026-08-10 | tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::append_dir_all() function that allows attackers to read files outs… |
CVE-2026-15059 | Medium | 5.5 | 2026-08-10 | Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation. |
CVE-2026-17435 | Low | 2.5 | 2026-08-07 | File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files.
When the file to be rotated is a symbolic link… |
CVE-2026-71556 | High | 7.1 | 2026-08-07 | go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (including checkout, status, and… |
CVE-2026-71476 | | | 2026-08-06 | Nx is a monorepo solution for TypeScript and polyglot codebases. From version 20.8.0 until 22.7.7 and 23.0.2, the Nx self-hosted HTTP remote cache extracts dow… |
CVE-2026-19008 | Medium | 6.3 | 2026-08-06 | A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.t… |
CVE-2026-70427 | Medium | 4.3 | 2026-08-05 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle symbolic links with effectively empty names during the extraction of `.tar` and `.tar… |
CVE-2026-20310 | Critical | 9.1 | 2026-08-05 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive inter… |
CVE-2026-12410 | High | 7.8 | 2026-08-05 | Link following vulnerability in the Uninstaller component in CCleaner prior to 7.10.1464 on Windows allows a local, low-privileged attacker to escalate privile… |
CVE-2026-40717 | Medium | 6.6 | 2026-08-03 | Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with… |
CVE-2026-18508 | Medium | 4.4 | 2026-08-03 | A flaw was found in GNU tar. When extracting an archive with the --one-top-level option, hardlink targets are not confined to the designated top-level director… |
CVE-2026-54706 | Medium | 4.8 | 2026-07-31 | OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. Prior to 2.6… |
CVE-2026-67433 | | | 2026-07-29 | Linuxfabrik monitoring-plugins provides Python monitoring plugins for Icinga, Nagios, and related monitoring systems. In version 6.0.0, the logfile check legac… |
CVE-2026-13268 | High | 7.8 | 2026-07-29 | G DATA Total Security Backup Service Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges… |
CVE-2026-13723 | Medium | 6.5 | 2026-07-29 | A vulnerability in the `zipx.Unzip` extraction routine of Develar's app-builder allows an attacker to overwrite arbitrary files on macOS APFS by exploiting a U… |
CVE-2026-43765 | Medium | 5.5 | 2026-07-27 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be… |
CVE-2026-17459 | Medium | 4.3 | 2026-07-26 | A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/s… |
CVE-2026-12503 | | | 2026-07-24 | Improper Link Resolution (CWE-59) in `/usr/bin/larm_starter` in Loytec L-INX, L-GATE, L-ROC, L-IOB, L-DALI, L-VIS and L-PAD through 8.4.16 on LINX-A64 allows a… |
CVE-2026-65069 | Medium | 4.0 | 2026-07-21 | Data::DisjointSet::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW.
The segment is cre… |
CVE-2026-65068 | Low | 3.8 | 2026-07-21 | Data::SpatialHash::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW.
The segment is cre… |
CVE-2026-65067 | Low | 3.8 | 2026-07-21 | Data::Intern::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW.
The segment is created… |
CVE-2026-65066 | Low | 3.8 | 2026-07-21 | Data::RingBuffer::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW.
The segment is crea… |
CVE-2026-65065 | Medium | 5.5 | 2026-07-21 | Data::RoaringBitmap::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW.
The segment is c… |
CVE-2026-65064 | Low | 3.8 | 2026-07-21 | Data::HashMap::Shared versions before 0.14 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW.
The segment is created… |
CVE-2026-65063 | Low | 3.8 | 2026-07-21 | Data::RadixTree::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW.
The segment is creat… |
CVE-2026-65062 | Low | 3.8 | 2026-07-21 | Data::SortedSet::Shared versions before 0.03 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW.
The segment is creat… |
CVE-2026-65061 | Low | 3.8 | 2026-07-21 | Data::ReqRep::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW.
The segment is created… |
CVE-2026-64617 | Low | 3.8 | 2026-07-21 | Data::PubSub::Shared versions before 0.07 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW.
The segment is created… |
CVE-2026-64616 | Low | 3.3 | 2026-07-21 | Data::NDArray::Shared versions before 0.02 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW.
The segment is created… |
CVE-2026-64615 | Low | 3.3 | 2026-07-21 | Data::Graph::Shared versions before 0.04 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW.
The segment is created i… |
CVE-2026-64614 | Low | 3.8 | 2026-07-21 | Data::Deque::Shared versions before 0.06 for Perl create a world-readable mmap backing file and open it without O_EXCL or O_NOFOLLOW.
The segment is created i… |
CVE-2026-64613 | Medium | 6.2 | 2026-07-21 | Data::Buffer::Shared versions before 0.05 for Perl create a world-readable mmap backing file and open it without O_NOFOLLOW.
The segment is created in buf_gen… |
CVE-2026-47121 | Medium | 6.1 | 2026-07-21 | Sparkle is a software update framework for macOS. Prior to version 2.9.2, `Autoupdate/SUBinaryDeltaApply.m` enforces `relativePath.pathComponents containsObjec… |
CVE-2026-15788 | High | 7.5 | 2026-07-20 | BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory junctions placed inside the cache root. A… |
CVE-2026-8170 | | | 2026-07-20 | The mv, cp, and rm file utilities exposed within the ExtremeXOS (EXOS) shell environment fail to safely canonicalize paths and follow symbolic links outside of… |
CVE-2026-58414 | Medium | 5.5 | 2026-07-20 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentManager.backup()` recursively collects files using `_collectB… |
CVE-2026-16130 | Medium | 4.4 | 2026-07-18 | A vulnerability was identified in nearai ironclaw up to 0.29.1. The affected element is the function validate_path of the file src/tools/builtin/path_utils.rs… |
CVE-2026-16077 | Medium | 5.3 | 2026-07-18 | A vulnerability was found in AstrBotDevs AstrBot up to 4.25.5. Impacted is the function _normalize_rw_path of the file astrbot/core/tools/computer_tools/fs.py… |
CVE-2026-50163 | High | 7.1 | 2026-07-17 | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the… |
CVE-2026-53535 | | | 2026-07-16 | Activepieces is an open source AI workflow automation platform. Prior to 0.82.0, the git-sync feature clones a user-configured Git repository into a temporary… |
CVE-2026-12391 | Medium | 5.0 | 2026-07-16 | An insecure symlink following vulnerability exists in Canonical ubuntu-pro-client (formerly ubuntu-advantage-tools) within the pro collect-logs command framewo… |
CVE-2026-61371 | High | 7.5 | 2026-07-15 | Microsoft AVML before 0.17.0 could follow a symlink when opening a destination output path on Unix, allowing truncation/overwrite of the symlink target. The de… |
CVE-2026-61859 | Low | 3.3 | 2026-07-15 | ImageMagick before 7.1.2-26 and 6.9.13-x before 6.9.13-51 contains a policy bypass vulnerability in the -script operation due to missing security policy checks… |
CVE-2026-54572 | High | 7.5 | 2026-07-14 | Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, with -l/--links, rclone serializ… |
CVE-2026-53486 | Critical | 9.1 | 2026-07-14 | The decompress package for Node.js extracts archives. Prior to 10.2.1 and 11.1.3, archive extraction can create files and links outside the target directory. W… |
CVE-2026-50526 | High | 7.0 | 2026-07-14 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to perform tampering locally. |
CVE-2026-50469 | High | 7.8 | 2026-07-14 | Improper link resolution before file access ('link following') in Windows Projected File System allows an authorized attacker to elevate privileges locally. |
CVE-2026-50438 | High | 8.8 | 2026-07-14 | Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-58636 | High | 7.8 | 2026-07-14 | Improper link resolution before file access ('link following') in Window PC Manager allows an authorized attacker to elevate privileges locally. |
CVE-2026-50364 | High | 7.3 | 2026-07-14 | Improper link resolution before file access ('link following') in Windows Server Backup allows an authorized attacker to elevate privileges locally. |
CVE-2026-49791 | High | 7.1 | 2026-07-14 | Improper link resolution before file access ('link following') in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate pri… |
CVE-2026-49180 | Medium | 5.5 | 2026-07-14 | Improper link resolution before file access ('link following') in Universal Plug and Play (upnp.dll) allows an authorized attacker to disclose information loca… |
CVE-2026-49176 | High | 7.8 | 2026-07-14 | Improper privilege management in Windows WalletService allows an authorized attacker to elevate privileges locally. |
CVE-2026-15392 | High | 7.7 | 2026-07-14 | DBD::File versions before 1.651 for Perl do not ensure the table file is not a symlink to an untrusted location.
The complete_table_name method builds the abs… |
CVE-2026-6851 | High | 7.0 | 2026-07-14 | An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet… |
CVE-2026-15629 | Medium | 6.3 | 2026-07-14 | A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of… |
CVE-2026-15621 | Medium | 5.3 | 2026-07-14 | A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function read_file/write_file/edit_file of the file tools/fs_ops.go of the compo… |
CVE-2026-62239 | Medium | 6.6 | 2026-07-13 | FlashAttention through 2.8.3.post1, fixed in commit 0816ef1, contains a symlink attack vulnerability in the download_and_copy() function within hopper/setup.py… |
CVE-2026-62189 | High | 7.1 | 2026-07-13 | OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync feature that allows lower-trust callers to perform actions requi… |
CVE-2026-15684 | High | 7.3 | 2026-07-13 | Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected… |
CVE-2026-15682 | Medium | 5.5 | 2026-07-13 | AnyDesk Support Information Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition o… |
CVE-2026-15681 | Medium | 5.5 | 2026-07-13 | AnyDesk Screen Recording Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on a… |
CVE-2026-61858 | Low | 3.3 | 2026-07-11 | ImageMagick before 7.1.2-26 contains a policy bypass vulnerability in the APNG encoder and external delegates due to missing validation checks. Attackers can w… |
CVE-2026-39246 | High | 7.5 | 2026-07-09 | decompress before 4.2.2 allows arbitrary symlink creation during archive extraction. When processing symlink entries (type === 'symlink'), the x.linkname field… |
CVE-2026-39243 | Medium | 5.5 | 2026-07-09 | decompress before 4.2.2 allows arbitrary hardlink creation during archive extraction, enabling file read disclosure and file corruption. When processing hardli… |
CVE-2026-58198 | Medium | 5.5 | 2026-07-09 | ChatterBot is a machine learning, conversational dialog engine for creating chat bots. Prior to 1.2.14, UbuntuCorpusTrainer.extract() uses a predictable home-r… |