CVE-2026-45066

CVE-2026-45066 affects Symfony’s HtmlSanitizer: URL sanitization bypass due to UrlSanitizer::parse() following RFC 3986 while browsers use WHATWG, and because is checked against the media policy instead of the link policy. Affected versions: 6.1.0-BETA1–6.4.40, 7.4.12, and 8.0.12. Impact: off-al...

CVE-2026-45066

Symfony is a PHP framework for web and console applications and a set of reusable PHP components. From 6.1.0-BETA1 until 6.4.40, 7.4.12, and 8.0.12, HtmlSanitizer URL sanitization can allow off-allowlist URLs through allowLinkHosts or allowMediaHosts because UrlSanitizer::parse follows RFC 3986...

CVE-2026-51821

creationtimestamp| type| source ---|---|--- 2026-07-14 17:30:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmqbeydro2w...

CVE-2026-58636

Improper link resolution before file access 'link following' in Window PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-50364

Improper link resolution before file access 'link following' in Windows Server Backup allows an authorized attacker to elevate privileges locally...

CVE-2026-49791

Improper link resolution before file access 'link following' in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2026-49180

Improper link resolution before file access 'link following' in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...

CVE-2026-50364

Technical details (affected product/version, root cause, and fixes) are not publicly available in the provided documents. Monitor for updates.

CVE-2026-50364

Improper link resolution before file access 'link following' in Windows Server Backup allows an authorized attacker to elevate privileges locally...

CVE-2026-49791

CVE-2026-49791 affects Windows Routing and Remote Access Service (RRAS). The issue is an improper link resolution before file access (link following) that can allow an authorized, local attacker to elevate privileges. The vulnerability is triggered locally with low attack complexity and low privi...

CVE-2026-49180

This CVE concerns the Universal Plug and Play component upnp.dll, where an improper link resolution before file access (link following) can lead to local information disclosure. The entry notes that an authorized attacker can disclose information locally, with a CVSS base score of 5.5 (Medium). A...

CVE-2026-58636

Microsoft Windows PC Manager is affected by CVE-2026-58636 due to improper link resolution before file access ("link following"), enabling an authenticated local attacker to elevate privileges. Current records indicate a local privilege escalation with high impact, but do not specify affected ver...

CVE-2026-15392

creationtimestamp| type| source ---|---|--- 2026-07-14 16:56:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqmoehb2hv24 2026-07-17 08:06:33+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqtc6h73t72z 2026-07-17 08:06:52+00:00| seen|...

CVE-2026-42491

creationtimestamp| type| source ---|---|--- 2026-07-14 16:35:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqmnanemgl23 2026-07-15 14:15:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqovu3ew4h2c 2026-07-15 14:15:30+00:00| seen|...

CVE-2026-9653

creationtimestamp| type| source ---|---|--- 2026-07-14 16:32:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmn3bsbcd24 2026-07-16 16:15:50+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-02 2026-07-22 04:55:44+00:00| seen|...

CVE-2026-15695

creationtimestamp| type| source ---|---|--- 2026-07-14 16:27:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmmsddly72i 2026-07-22 05:04:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7kduliog2u...

CVE-2026-15696

creationtimestamp| type| source ---|---|--- 2026-07-14 16:06:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmllzp5fa25 2026-07-22 04:39:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7ixjgjm62j...

CVE-2026-10714

creationtimestamp| type| source ---|---|--- 2026-07-14 15:53:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmkvcmmf226 2026-07-22 05:12:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7kr4xytx2u...

CVE-2026-58477

creationtimestamp| type| source ---|---|--- 2026-07-14 15:46:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmki7bc3l2k 2026-07-15 06:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqo4ap2chw26 2026-07-15 06:37:07+00:00| seen|...

CVE-2026-53412

creationtimestamp| type| source ---|---|--- 2026-07-14 15:28:44+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mqmjig5kye22 2026-07-14 16:45:06+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-zoom-2 2026-07-15 13:34:27+00:00| seen|...