Lucene search
+L

7 matches found

NVD
NVD
•added 2026/05/18 4:16 a.m.•38 views

CVE-2026-8784

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

4.6CVSS0.00197EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2026/05/18 2:30 a.m.•18 views

CVE-2026-8784

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

4.6CVSS4.8AI score0.00197EPSS
SaveExploits0References7Affected Software1
CVE
CVE
•added 2026/05/18 2:30 a.m.•36 views

CVE-2026-8784

Technical details are not publicly available in the provided documents. Monitor for updates.

4.6CVSS4.8AI score0.00197EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/05/18 2:30 a.m.•61 views

CVE-2026-8784 npitre cramfs-tools cramfsck.c change_file_status symlink

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

4.6CVSS0.00197EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/05/18 2:30 a.m.•48 views

EUVD-2026-30728

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

4.6CVSS4.8AI score0.00197EPSS
SaveExploits0References7
CNNVD
CNNVD
•added 2026/05/18 12:00 a.m.•37 views

cramfs-tools 后置链接漏洞

cramfs-tools is a compression read-only file system tool developed by Nicolas Pitre. Versions of cramfs-tools prior to 2.2 had a post-installation link vulnerability. This vulnerability stemmed from the operation of the changefilestatus function in the cramfsck.c file, which allowed symbolic link...

4.6CVSS5.6AI score0.00197EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/18 12:00 a.m.•9 views

CVE-2026-8784: UNIX Symbolic Link (Symlink) Following

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

4.6CVSS4.8AI score0.00197EPSS
SaveExploits0References3
Rows per page
Query Builder