CVE-2026-108140

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

CVE-2026-106077

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges...

CVE-2025-64394

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service...

CVE-2026-116673

systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStatsiface implementation uses the caller-supplied interface value in an fs.existsSync check and to build /sys/class/net/ paths, including the operstate path, without verifying that it is a...

CVE-2026-108140

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

EUVD-2026-111122

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges...

CVE-2026-106077

A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges...

EUVD-2026-111124

A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...

CVE-2026-106077

A vulnerability in Veeam Backup for Microsoft 365 allows a user assigned the Veeam Backup for Microsoft 365 Administrator role to perform arbitrary file reads on the backup server. This flaw results in the ability to access files with LocalSystem privileges , as identified by CWE-863 (Incorrect A...

CVE-2025-64394

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service...

EUVD-2025-211203

A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service...

CVE-2026-108140

This vulnerability allows an authenticated user with the Restore Operator role to perform a relative path traversal attack. If the user also controls the contents of a backed-up NAS share , they can write attacker-controlled files to an arbitrary path on the backup server. No specific software ve...

CVE-2025-64394

A vulnerability in Veeam Backup for Microsoft 365 allows a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation process. The root cause is associated with CWE-1386 (Insecure Operation on Windows Junction / Mount Point). This flaw can lead to privilege ...

CVE-2026-90464

The WatchGuard Fireware OS firewall contains an external control of file path vulnerability within a diagnostic command. A remote, authenticated attacker possessing at least read-only (Device Monitor) privileges and management CLI access can submit a specially crafted command to create, truncate,...

CVE-2026-90464 Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root

An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with at least read-only Device Monitor privileges and access to the management CLI to create, truncate, or overwrite arbitrary files and modify kernel...

CVE-2026-93864 Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root

A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution as a low-privileged system process to overwrite arbitrary files with root privileges, and to tamper with firewall IP set data, by planting a crafted file system object and...

CVE-2026-93864

A link following vulnerability exists in the WatchGuard Fireware OS firewall daemon. A local attacker with code execution as a low-privileged system process can overwrite arbitrary files with root privileges and tamper with firewall IP set data. This is achieved by planting a crafted file system ...

CVE-2026-93864 Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root

A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution as a low-privileged system process to overwrite arbitrary files with root privileges, and to tamper with firewall IP set data, by planting a crafted file system object and...

GHSA-3W55-933P-8PV5 Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage

Summary The FileSessionManager defaults to storing session data in /tmp/strands/sessions/ a world-writable directory using predictable file paths and a write pattern openpath + ".tmp", "w" → os.replace that follows symbolic links. A local attacker can exploit this to overwrite arbitrary files or...

Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage

Summary The FileSessionManager defaults to storing session data in /tmp/strands/sessions/ a world-writable directory using predictable file paths and a write pattern openpath + ".tmp", "w" → os.replace that follows symbolic links. A local attacker can exploit this to overwrite arbitrary files or...