CVE-2026-64846

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-64846 Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

CVE-2026-64846

Nix versions prior to 2.35.0 contain a TOCTOU race in the LocalStore restore path: writeFile opens a path with O_TRUNC instead of enforcing FinalSymlink::DontFollow, allowing a malicious derivation (with recursive-nix enabled) to create or truncate an empty file outside the build sandbox with dae...

EUVD-2026-63424

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

EUVD-2026-63413

Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specific flaw...

CVE-2026-18267 Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability

Kenwood DNR1007XR Firmware Update Link Following Code Execution Vulnerability. This vulnerability allows physically present attackers to execute arbitrary code on affected installations of Kenwood DNR1007XR devices. Authentication is not required to exploit this vulnerability. The specific flaw...

extract-zip: github.com/maxogden/extract-zip: extract-zip: Arbitrary file write and information disclosure via symlink validation bypass

A flaw was found in extract-zip. This vulnerability allows a remote attacker to craft a malicious zip file containing symbolic links that point to locations outside the intended extraction directory. When a user extracts this malicious archive, extract-zip fails to validate the symlink targets,...

GHSA-PW2R-VQ6V-HR8C vulnerabilities

Vulnerabilities for packages: arangodb...

GHSA-JQQW-37X4-9RWJ vulnerabilities

Vulnerabilities for packages: gnutar...

PT-2026-79236

Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Local attackers can overwrite arbitrary files because the system does not properly resolve symbolic links, which are shortcuts that point to another file or directory...

mrtg security update

2.17.7-12.0.1.el98.1 - Create mrtg lock file before running restorecon on it Orabug: 39096845 2.17.7-12.1 - Fix CVE-2026-72694: symlink-following chown of pid file in daemon mode Resolves: RHEL-236047...

PT-2026-79064

Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-check/time-of-use race involving final symlink handling in the LocalStore restore path. The race can cause writeFile to...

VulnCheck KEV: CVE-2015-5287

Red Hat Automatic Bug Reporting Tool ABRT contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted products could be end-of-life EoL and/or end-of-service EoS. Users...

PT-2026-79169

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a local attacker to gain elevated privileges due to improper handling of symbolic links...

Important: mrtg security update

The Multi Router Traffic Grapher MRTG monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provide a live visual representation of this traffic. Security Fixes: mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID...

ALSA-2026:57600 Important: mrtg security update

The Multi Router Traffic Grapher MRTG monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provide a live visual representation of this traffic. Security Fixes: mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID...

RHEL 9 : mrtg (RHSA-2026:57600)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:57600 advisory. The Multi Router Traffic Grapher MRTG monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provid...

PT-2026-79168

Name of the Vulnerable Software and Affected Versions IBM AIX version 7.2 IBM AIX version 7.3 IBM PowerVM VIOS version 4.1 Description Local attackers can gain elevated privileges due to the improper resolution of symbolic links, which are files that act as pointers to other files or directories...

RHEL 10 : mrtg (RHSA-2026:57596)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:57596 advisory. The Multi Router Traffic Grapher MRTG monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provi...

ALSA-2026:57596 Important: mrtg security update

The Multi Router Traffic Grapher MRTG monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provide a live visual representation of this traffic. Security Fixes: mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID...