Elastic Cloud Enterprise backlink vulnerability

Versions 2.6.0 through 3.8.5 and 4.0.0 through 4.2.0 of Elastic Cloud Enterprise contain a post-link vulnerability. This vulnerability stems from improper link resolution prior to file access; it may allow unauthorized disclosure and loss of data from other deployments on the same host via symbol...

HashiCorp Nomad backlink vulnerability

Versions prior to HashiCorp Nomad 2.1.0 and HashiCorp Nomad Enterprise 2.1.0 contain a post-link vulnerability. This vulnerability stems from a symbolic link traversal issue during data migration by the same client, which may allow malicious workloads to modify host directories’ permissions and...

Elastic Cloud Enterprise backlink vulnerability

Versions 1.0.0 through 3.8.5 and 4.0.0 through 4.2.0 of Elastic Cloud Enterprise contain a post-link vulnerability. This vulnerability stems from improper link resolution prior to file access; it is susceptible to symbolic link attacks and may lead to authentication bypass as well as unauthorized...

Elastic Cloud Enterprise backlink vulnerability

Versions 4.1.0 through 4.2.0 of Elastic Cloud Enterprise contain a post-link vulnerability. This vulnerability stems from improper link resolution prior to file access and may allow symbolic link attacks, leading to unauthorized reading and writing of data on other deployments on the same host...

Tanium endpoint configuration toolset solution post-link vulnerability

Versions prior to 1.51.60 of the Tanium endpoint configuration toolset, versions prior to 1.59.50 of the 1.59.x series, and versions prior to 1.71.25 of the 1.71.x series contain a post-link vulnerability. This vulnerability stems from improper link resolution prior to file access, potentially...

Bytecode Alliance wasmtime post-link vulnerability

Versions of Wasmtime prior to 24.0.13, from 25.0.0 up to versions prior to 36.0.14, from 37.0.0 up to versions prior to 46.0.3, and from 47.0.0 up to versions prior to 47.0.4 contain a post-link vulnerability. This vulnerability arises because cap-std’s dependency fails to properly handle symboli...

Microsoft VM Inspector for Azure Virtual Machines post-link vulnerability

The Microsoft VM Inspector for Azure Virtual Machines contains a post-link vulnerability stemming from improper link resolution prior to file access “link following”, which may allow unauthorized attackers to escalate privileges over the network...

tox-dev filelock backend link vulnerability

The tox-dev filelock version 3.32.6 up to version 4.2.1 has a post-processing link vulnerability. This vulnerability arises from SoftFileLock’s handling of symbolic links when checking the writeability of nodes without owner write permissions. It may allow local users to infer whether the selecte...

tox-dev filelock backend link vulnerability

In versions of tox-dev FileLock from 4.0.0 to 4.2.1, there was a post-processing link vulnerability. This vulnerability stemmed from SoftReadWriteLock’s mechanism for refreshing holder records by name. Local users with permission to rename lock directories could replace the records with named...

Pulseaiclub phi backend link vulnerability

The PulseAIClub phi version 0.1.1 to 0.28.4 has a post-link vulnerability. This vulnerability arises from improper link resolution; the permission check only performs lexical path checks. Malicious repositories can exploit this to bypass the workspaceonlywrites restriction. By submitting symbolic...

EUVD-2026-54447

Tobit Laboratories AG TeamDavid's Webbox application contains a reflected cross-site scripting XSS vulnerability. By sending a specially crafted link including an arbitrary path, an XSS payload or the parameter “EntryInfo”, and the parameter “!templateName=entryMail”, an attacker can cause the...

CVE-2026-65710

SysPass 3.2.11 is affected by a missing authorization vulnerability in the PublicLink flow. Authenticated users with the PUBLICLINK_CREATE profile flag can trigger unauthorized decryption and persistence of vault passwords by abusing the absence of AccountAcl checks in the public link creation pa...

CVE-2026-50163

oras-go is a Go library for managing OCI artifacts. Prior to 2.6.2, ensureLinkPath in content/file/utils.go:262-275 validates a hardlink target relative to the extract base but returns the unresolved target, causing os.Link"victim.secret", "/payload.tar.gz/evilcwdlink" to resolve header.Linkname...

PT-2026-55134

Share-link ?token=… redemption races past download limit Ecosystem: Go Package: goshs.de/goshs/v2 github.com/patrickhener/goshs Affected: 0 || entry.DownloadLimit == -1 // ...serve file... // = current.DownloadLimit deletefs.SharedLinks, token fs.sharedLinksMu.Unlock Between line 978 RUnlock and...

CVE-2026-54889

Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...

CVE-2026-54889 Unsanitized URL schemes in MDEx Quill Delta output allow javascript: injection (XSS)

Improper Neutralization of Input During Web Page Generation XSS vulnerability in leandrocp mdex allows cross-site scripting via unsanitized URL schemes in Quill Delta output. 'Elixir.MDEx':todelta/2 converts Markdown into a Quill Delta. 'Elixir.MDEx.DeltaConverter':defaultconvertnode/3 in...

UNIX Symbolic Link (Symlink) Following

Overview Affected versions of this package are vulnerable to UNIX Symbolic Link Symlink Following through the WriteToCachedFile function when handling network cache files in certain configurations. An attacker can overwrite specific host files and change their ownership by planting a symbolic lin...

CVE-2026-48745 Traccar Client: silent configuration hijack via unverified deep link redirects all GPS telemetry

Traccar Client is a GPS tracking mobile app for sending location updates to private servers using the open-source Traccar platform. In versions 9.7.19 and below, a single crafted deep link can silently hijack all GPS tracking parameters and redirect telemetry to an attacker-controlled server. The...

CVE-2026-46529

A flaw was found in Atril, Evince and Xreader. A malicious link inside a specially crafted PDF document can cause arbitrary code execution when clicked due to improper quoting of attacker-controlled PDF link-destination fields during remote go-to /GoToR actions. This issue allows an attacker to...

bit7z Postback Link Vulnerability

bit7z is a file compression/uncompression tool developed by Riccardo as an individual project. Versions of bit7z prior to 4.0.12 had a post-installation link vulnerability. This vulnerability stemmed from the use of symbolic links during archive updates, allowing for arbitrary file overwriting...