CVE-2026-55480 | Medium | 5.7 | 2026-10-15 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copy_model() in scheduler/ipp.c creates a… |
CVE-2026-53882 | | | 2026-10-15 | An improper link resolution before file access ('link following') vulnerability has been reported to affect Virtualization Station. If a remote attacker gains… |
CVE-2026-110860 | Medium | 6.1 | 2026-10-14 | GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which checks the destination only lexically and does not reject symbo… |
CVE-2026-104109 | Medium | 6.8 | 2026-10-14 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise validates archive entry names… |
CVE-2026-55498 | Medium | 4.8 | 2026-10-14 | FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.15.0, FileRise public shared-folder links wi… |
CVE-2026-110767 | High | 7.5 | 2026-10-14 | Gitingest through 0.3.1 contains a symlink following vulnerability in ingest_query single-file blob ingestion that allows unauthenticated attackers to read ser… |
CVE-2026-104103 | High | 8.1 | 2026-10-14 | Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models. Prior to 0.17.8, ludwig.datasets.archives.extract_archive() vali… |
CVE-2026-103975 | Medium | 6.5 | 2026-10-14 | Appium is a cross-platform automation framework for all kinds of apps, built on top of the W3C WebDriver protocol. Prior to 7.2.6, @appium/support ZIP extracti… |
CVE-2026-90954 | High | 7.8 | 2026-10-14 | A flaw was found in BusyBox's dpkg-deb archive extraction. The ar archive handler flushes deferred symlinks after each archive member, unlike the tar, cpio, an… |
CVE-2026-97790 | Medium | 5.5 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to p… |
CVE-2026-96911 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall… |
CVE-2026-96243 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows WalletService allows an authorized attacker to elevate privileges locally. |
CVE-2026-96231 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. |
CVE-2026-96225 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. |
CVE-2026-88191 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall… |
CVE-2026-88133 | High | 7.8 | 2026-10-13 | Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-88072 | High | 7.8 | 2026-10-13 | Improper access control in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-85849 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-85343 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally. |
CVE-2026-83933 | Medium | 5.5 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information loc… |
CVE-2026-83927 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Registry allows an authorized attacker to elevate privileges locally. |
CVE-2026-83793 | High | 7.0 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges local… |
CVE-2026-83704 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locall… |
CVE-2026-83659 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally. |
CVE-2026-83507 | Medium | 5.5 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information loc… |
CVE-2026-70264 | Medium | 5.5 | 2026-10-13 | Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to disclose information locally. |
CVE-2026-70190 | High | 7.3 | 2026-10-13 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. |
CVE-2026-70165 | Medium | 6.7 | 2026-10-13 | Improper link resolution before file access ('link following') in .NET allows an authorized attacker to elevate privileges locally. |
CVE-2026-69969 | Medium | 4.7 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to disclose information locally. |
CVE-2026-69673 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Update allows an authorized attacker to elevate privileges locally. |
CVE-2026-62687 | Medium | 5.5 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to disclose information locally. |
CVE-2026-108135 | High | 7.0 | 2026-10-13 | Improper link resolution before file access ('link following') in Windows Backup Engine allows an authorized attacker to elevate privileges locally. |
CVE-2026-102204 | High | 7.8 | 2026-10-13 | Improper link resolution before file access ('link following') in Microsoft Defender for Endpoint allows an authorized attacker to elevate privileges locally. |
CVE-2026-102202 | High | 7.8 | 2026-10-13 | Improper access control in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally. |
CVE-2026-53562 | | | 2026-10-13 | Improper link resolution before file access ('link following') vulnerability in Citrix UniconOS.
This issue affects UniconOS: before 2607 CR and before 2603 L… |
CVE-2026-77361 | Medium | 4.7 | 2026-10-13 | obsidian-tc is a governed, agent-ready Model Context Protocol server for Obsidian vaults. Prior to 1.3.1, read access-control list (ACL) checks use a lexical v… |
CVE-2026-109965 | High | 7.1 | 2026-10-13 | Serena before 2.0.0 contains an improper link resolution vulnerability that allows attackers to access files outside the project root by committing symlinks in… |
CVE-2026-109596 | Medium | 5.5 | 2026-10-12 | Hugo from v0.162.0 before v0.167.0 contains an improper link resolution vulnerability that lets malicious themes or modules expose files outside their root via… |
CVE-2026-109375 | Medium | 6.1 | 2026-10-12 | Vercel deepsec from 0.1.0 before 1.1.17 contains a link following vulnerability in extractTarballLocally that allows sandboxed code to write files outside the… |
CVE-2026-109274 | Low | 2.5 | 2026-10-12 | ImageMagick before 7.1.2-32 contains a time-of-check time-of-use symlink race vulnerability that allows attackers to bypass the path security policy when execu… |
CVE-2026-105081 | Low | 3.6 | 2026-10-12 | ImageMagick before 6.9.13-58 and 7.x before 7.1.2-33 does not properly account for symbolic links in the IsRightsAuthorizedByName security policy check, allowi… |
CVE-2026-108839 | Medium | 4.2 | 2026-10-11 | thClaws through 0.141.0 contains a link-following vulnerability in the post_inputs handler of the v1 API POST /v1/inputs endpoint that allows writes outside th… |
CVE-2026-108759 | Medium | 6.8 | 2026-10-11 | mistral.rs 0.9.0 through 0.9.4 contains a link following vulnerability in mistralrs-code-exec that allows sandboxed shell code to read and overwrite files outs… |
CVE-2026-108751 | Medium | 4.4 | 2026-10-11 | MoAI-ADK through 3.1.2 contains an improper link resolution vulnerability in the moai init template deployer that allows malicious repositories to overwrite fi… |
CVE-2026-108723 | Low | 2.5 | 2026-10-11 | answer-me-with-html through 0.5.0 contains a link following vulnerability in the am CLI code block src= embedding, where localPath() checks only path text with… |
CVE-2026-108600 | Medium | 4.7 | 2026-10-10 | open-multi-agent (@open-multi-agent/core) 1.5.0 through 1.21.2 contains a link following vulnerability in the file_write tool sandbox that allows attackers to… |
CVE-2026-108599 | Medium | 4.7 | 2026-10-10 | phi 0.1.1 through 0.28.4 contains an improper link resolution vulnerability that allows malicious repositories to bypass workspace_only_writes by exploiting le… |
CVE-2026-108119 | Medium | 6.3 | 2026-10-09 | A flaw was found in busybox. The tar applet's deferred link-creation handling for symlink and hardlink entries with unsafe-looking targets does not validate th… |
CVE-2026-107810 | High | 8.1 | 2026-10-09 | Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, internal/backup/restore.go extracts inner archives before applying the resto… |
CVE-2026-89091 | High | 8.8 | 2026-10-08 | A flaw was found in ansible-core. When installing a collection with
`ansible-galaxy collection install`, the archive extractor validates member
paths using lex… |
CVE-2026-107716 | | | 2026-10-08 | Banks generates meaningful LLM prompts using a simple template language. Prior to 2.5.1, Banks DirectoryPromptRegistry does not reject symbolic links for index… |
CVE-2026-107707 | High | 7.8 | 2026-10-08 | Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete… |
CVE-2026-107608 | Medium | 5.5 | 2026-10-08 | Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to ca… |
CVE-2026-107578 | Medium | 6.7 | 2026-10-08 | Improper link resolution and external control of file paths in the administrative command-line operations of hMailServer.exe in Progressive Robot hMailServer 6… |
CVE-2026-106508 | Medium | 5.3 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by potential file expos… |
CVE-2026-106507 | Medium | 5.3 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugin-techdocs-node package is affected by techdocs arbitrary f… |
CVE-2026-106500 | High | 8.5 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affe… |
CVE-2026-106486 | High | 8.5 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @ba… |
CVE-2026-76061 | Medium | 5.5 | 2026-10-06 | A flaw was found in CRI-O's `bind_mount_prefix` handling. When configured with a non-empty `bind_mount_prefix`, a malicious container or local attacker could u… |
CVE-2026-94620 | | | 2026-10-01 | Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior to version 1.11.0, `gh teacher download` clones… |
CVE-2026-103263 | Medium | 5.9 | 2026-10-01 | Tornado before 6.5.9 contains a path traversal vulnerability in StaticFileHandler that follows symbolic links inside the static root without confirming the res… |
CVE-2026-102118 | High | 7.8 | 2026-09-30 | A local privilege escalation vulnerability in Kiteworks could have allowed an attacker with an existing shell under a low-privileged service account to escalat… |
CVE-2026-102113 | High | 7.8 | 2026-09-30 | A privilege escalation vulnerability in Kiteworks could allow an attacker who has already obtained code execution as an unprivileged backend service account on… |
CVE-2026-10739 | | | 2026-09-30 | Cato Networks SDP Client for Windows before 6.12.6 allows a local user to delete arbitrary files with SYSTEM privileges via improper validation of a client-sup… |
CVE-2026-81310 | Medium | 6.6 | 2026-09-30 | Image Scanner Driver for Linux contains a link following vulnerability. An attacker who can log in to a Linux system where the product is installed may overwri… |
CVE-2026-79534 | Medium | 5.9 | 2026-09-29 | mark3labs mcp-filesystem-server v0.11.1 is vulnerable to Directory Traversal due to an improper link resolution in validatePath (filesystemserver/handler/helpe… |
CVE-2026-12345 | | | 2026-09-29 | The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a… |
CVE-2026-102242 | | | 2026-09-29 | Improper link resolution (CWE-59 / CWE-22) in the allowedLocalRoots path validation in Google MCP Toolbox for Databases versions 1.2.0 through 1.9.0 allows a r… |
CVE-2026-92371 | High | 7.0 | 2026-09-29 | TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functiona… |
CVE-2026-101894 | Critical | 9.1 | 2026-09-28 | The decompress package for Node.js extracts archives. Prior to 10.2.2 and 11.1.4, the default decompress(input, output) API relies on lexical containment check… |
CVE-2026-87799 | Critical | 9.9 | 2026-09-28 | Improper link resolution in the migration receive path in Canonical LXD versions 4.0 and later (fixed in 4.0.14, 5.0.10, 5.21.8 and 6.10) on Linux allows an au… |
CVE-2026-87798 | Medium | 5.8 | 2026-09-28 | Improper link resolution in the recursive file pull feature of the LXD CLI client in Canonical LXD versions 4.0.2 up to 6.9 (fixed in 4.0.14, 5.0.10 and 5.21.8… |
CVE-2026-96284 | Low | 2.5 | 2026-09-27 | A malicious user can get read-access to files in the flatpak-system-helper context if a system OCI repository is configured, because the OCI code paths in the… |
CVE-2026-96282 | Low | 3.1 | 2026-09-27 | A malicious Flatpak extension can probe the host filesystem to determine what files and directories exist at arbitrary paths, and host directory listings can b… |
CVE-2026-96279 | Medium | 6.5 | 2026-09-27 | A malicious OCI registry can hardlink arbitrary host files into the extraction directory when a user installs or updates a Flatpak application from an OCI remo… |
CVE-2026-100838 | High | 8.1 | 2026-09-27 | Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.19.1, the Kata agent policies generated by the Contrast CLI contained a flaw… |
CVE-2026-100716 | Critical | 9.9 | 2026-09-26 | Froxlor is a server administration panel. In versions 2.3.10 and earlier, the customer data-export (DataDump) cron fails to validate intermediate path componen… |
CVE-2026-100715 | Critical | 9.6 | 2026-09-26 | Froxlor through 2.3.10 is vulnerable to arbitrary file deletion via symlink following in the FTP data deletion cron task. Cron task 8 (deleteFtpData), queued w… |
CVE-2026-100692 | High | 7.5 | 2026-09-26 | Hugo is a static site generator. In versions after v0.123.0 and before v0.166.0, Hugo's symlink confinement checks stopped at the mount root itself, so a theme… |
CVE-2026-100690 | High | 7.5 | 2026-09-26 | Hugo versions from v0.161.0 through v0.165.0 run Node.js tools (css.PostCSS, css.TailwindCSS, js.Babel) under the Node.js permission model to restrict file sys… |
CVE-2026-100419 | High | 7.0 | 2026-09-25 | gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree d… |
CVE-2026-80430 | | | 2026-09-25 | Improper Link Resolution Before File Access in the drag source staging path of the drag and drop protocol in kitty from 0.47.0 before 0.49.0 allows a program w… |
CVE-2026-93353 | Low | 3.1 | 2026-09-24 | copyparty contains a volume restriction bypass vulnerability in its SFTP front end that allows authenticated SFTP users to create, remove, and truncate arbitra… |
CVE-2026-82331 | Critical | 9.8 | 2026-09-23 | Improper link resolution before file access ('link following') vulnerability in the `tar` source plugin of Apache BuildStream running on Python < 3.12 allows m… |
CVE-2026-55074 | | | 2026-09-21 | Ansible FreeBSD Jail Connection Plugin is an Ansible connection plugin for FreeBSD Jails via jexec. Through version 1.3.0, the jailexec connection plugin's put… |
CVE-2026-92253 | | | 2026-09-20 | Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attack… |
CVE-2026-15815 | High | 8.8 | 2026-09-17 | Grafana OSS and Grafana Enterprise did not safely resolve symbolic links when
extracting plugin archives. A crafted plugin archive can chain relative symbolic… |
CVE-2026-54587 | | | 2026-09-17 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, directory assets handled as ASSET_DIR or ASSET_DIR_OWNER_MODE in libmport/bundle_read_install_pkg.c u… |
CVE-2026-54576 | | | 2026-09-17 | mport is the MidnightBSD Package Manager. Prior to 2.7.8, do_actual_install() in libmport/bundle_read_install_pkg.c used path-based lstat(), chown(), stat(), a… |
CVE-2026-86861 | Medium | 5.9 | 2026-09-17 | pgAdmin 4's File Manager save_file endpoint, which backs saving from the Query Tool and ERD, validated the requested path with Filemanager.check_access_permiss… |
CVE-2026-85731 | High | 8.8 | 2026-09-16 | oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, content/file.Store extraction of OCI layers marked with io.deis.oras.content.unpack=true ca… |
CVE-2026-71182 | Low | 3.0 | 2026-09-16 | Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high pri… |
CVE-2026-71181 | Low | 3.0 | 2026-09-16 | Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A high pri… |
CVE-2026-59944 | Medium | 6.1 | 2026-09-16 | Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and from 2.3.0 until 2.10.3, a malicious or compromised dependency can bypass the… |
CVE-2026-68491 | | | 2026-09-15 | An insufficient check allowed for the overwrite of arbitrary files via a symlink. |
CVE-2026-79699 | Medium | 4.4 | 2026-09-15 | A flaw was found in the containers/storage library. A crafted tar archive containing a malicious whiteout header (e.g. victim/.wh.) can cause the extraction de… |
CVE-2026-55828 | | | 2026-09-15 | qbee transport is a remote access transport protocol implementation. Prior to 1.26.25, the extractTar routine uses strictly lexical path validation that does n… |
CVE-2026-77179 | | | 2026-09-15 | On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows symlinks when reopening an unlinked file from a stored path. A malicious guest… |
CVE-2026-84584 | High | 8.4 | 2026-09-14 | This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden Gate 27. An app may be able to break out of its sandbox. |
CVE-2026-89021 | Medium | 6.9 | 2026-09-14 | MikroTik RouterOS before 7.24.2 contains a path traversal vulnerability in the container package OCI/tar image extraction that allows attackers to write files… |