CVE-2026-0291: Improper Link Resolution Before File Access

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent. The Prisma Access Agent on macOS, Windows, iOS,...

Prisma Access Agent: Authenticated Limited File Deletion on Linux

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Access Agent. The Prisma Access Agent on macOS, Windows, iOS,...

EUVD-2026-56826

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

CVE-2026-65680

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

EUVD-2026-56678

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

CVE-2026-65680: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

CVE-2026-70348: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Management Services allows an authorized attacker to deny service locally...

CVE-2026-61358: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...

CVE-2026-62776: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

CVE-2026-62761: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

CVE-2026-62803: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

CVE-2026-72971: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...

CVE-2026-62832: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

Cisco Catalyst SD-WAN Software Security Hardening (cisco-sa-hardening-sdwan-faLcR3K)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by multiple vulnerabilities. - Multiple vulnerabilities in Cisco Catalyst SD-WAN Software could allow an authenticated, remote attacker to conduct path traversal attacks, gain unauthorized access, or cause a denial ...

CVE-2026-71556: Improper Link Resolution Before File Access

go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations including checkout, status, and add resolve symbolic links inside the working tree without confining resolution to the worktree boundary, so a maliciously crafted reposito...

Vulnerabilities in Cisco Catalyst SD-WAN

Cisco has identified several vulnerabilities in Cisco Catalyst SD-WAN. The identified issues include incorrect input validation, incorrect access control, incorrect link resolution before file access, and the storage of sensitive information in cleartext. Due to these vulnerabilities, the softwar...

CVE-2026-19008: Improper Link Resolution Before File Access

A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the function assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the component applypatch Tool. Such manipulation leads to link following. It is possible to launch the attack remotely. The exploit i...

CVE-2026-20313

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...

CVE-2026-20310

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. The...