Lucene search
+L

7 matches found

NVD
NVD
•added 2026/05/18 4:16 a.m.•35 views

CVE-2026-8784

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

4.6CVSS0.00197EPSS
SaveExploits0References7
CVE
CVE
•added 2026/05/18 2:30 a.m.•29 views

CVE-2026-8784

Technical details are not publicly available in the provided documents. Monitor for updates.

4.6CVSS5.4AI score0.00197EPSS
SaveExploits0References7
EUVD
EUVD
•added 2026/05/18 2:30 a.m.•42 views

EUVD-2026-30728

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

4.6CVSS5.4AI score0.00197EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/05/18 2:30 a.m.•55 views

CVE-2026-8784 npitre cramfs-tools cramfsck.c change_file_status symlink

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

4.6CVSS0.00197EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2026/05/18 2:30 a.m.•16 views

CVE-2026-8784

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

4.6CVSS5.4AI score0.00197EPSS
SaveExploits0References7Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/18 12:00 a.m.•1 views

CVE-2026-8784: UNIX Symbolic Link (Symlink) Following

A vulnerability was detected in npitre cramfs-tools up to 2.2. Affected is the function changefilestatus of the file cramfsck.c. Performing a manipulation results in symlink following. The attack requires a local approach. The exploit is now public and may be used. The patch is named...

4.6CVSS5AI score0.00197EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/05/18 12:00 a.m.•27 views

cramfs-tools 后置链接漏洞

cramfs-tools is a compression read-only file system tool developed by Nicolas Pitre. Versions of cramfs-tools prior to 2.2 had a post-installation link vulnerability. This vulnerability stemmed from the operation of the changefilestatus function in the cramfsck.c file, which allowed symbolic link...

4.6CVSS5.8AI score0.00197EPSS
SaveExploits0References1
Rows per page
Query Builder