CVE-2026-49791

CVE-2026-49791 affects Windows Routing and Remote Access Service (RRAS). The issue is an improper link resolution before file access (link following) that can allow an authorized, local attacker to elevate privileges. The vulnerability is triggered locally with low attack complexity and low privi...

CVE-2026-49180

This CVE concerns the Universal Plug and Play component upnp.dll, where an improper link resolution before file access (link following) can lead to local information disclosure. The entry notes that an authorized attacker can disclose information locally, with a CVSS base score of 5.5 (Medium). A...

CVE-2026-58636

Microsoft Windows PC Manager is affected by CVE-2026-58636 due to improper link resolution before file access ("link following"), enabling an authenticated local attacker to elevate privileges. Current records indicate a local privilege escalation with high impact, but do not specify affected ver...

CVE-2026-15392

creationtimestamp| type| source ---|---|--- 2026-07-14 16:56:00+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqmoehb2hv24 2026-07-17 08:06:33+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqtc6h73t72z 2026-07-17 08:06:52+00:00| seen|...

CVE-2026-42491

creationtimestamp| type| source ---|---|--- 2026-07-14 16:35:58+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqmnanemgl23 2026-07-15 14:15:26+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqovu3ew4h2c 2026-07-15 14:15:30+00:00| seen|...

CVE-2026-9653

creationtimestamp| type| source ---|---|--- 2026-07-14 16:32:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmn3bsbcd24 2026-07-16 16:15:50+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-197-02 2026-07-22 04:55:44+00:00| seen|...

CVE-2026-15695

creationtimestamp| type| source ---|---|--- 2026-07-14 16:27:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmmsddly72i 2026-07-22 05:04:41+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7kduliog2u...

CVE-2026-15696

creationtimestamp| type| source ---|---|--- 2026-07-14 16:06:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmllzp5fa25 2026-07-22 04:39:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7ixjgjm62j...

CVE-2026-10714

creationtimestamp| type| source ---|---|--- 2026-07-14 15:53:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmkvcmmf226 2026-07-22 05:12:05+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mr7kr4xytx2u...

CVE-2026-58477

creationtimestamp| type| source ---|---|--- 2026-07-14 15:46:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqmki7bc3l2k 2026-07-15 06:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqo4ap2chw26 2026-07-15 06:37:07+00:00| seen|...

CVE-2026-53412

creationtimestamp| type| source ---|---|--- 2026-07-14 15:28:44+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mqmjig5kye22 2026-07-14 16:45:06+00:00| seen| https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-zoom-2 2026-07-15 13:34:27+00:00| seen|...

CVE-2025-62675

The CVE-2025-62675 entry concerns an issue described as an Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Response Splitting) in Fortinet FortiOS and FortiProxy products. Affected versions are FortiOS 7.6.0–7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6...

CVE-2026-47871

creationtimestamp| type| source ---|---|--- 2026-07-14 15:09:12+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqmifhw5al2k 2026-07-17 16:15:16+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/broadcom-vmware-security-advisory-av26-712 2026-07-18 10:01:38+00:00| seen|...

CVE-2026-52533

creationtimestamp| type| source ---|---|--- 2026-07-14 14:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqmhdbr2fk2t...

Microsoft PC Manager Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Window PC Manager allows an authorized attacker to elevate privileges locally...

.NET Tampering Vulnerability

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

Windows Projected File System Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Projected File System allows an authorized attacker to elevate privileges locally...

Windows Backup Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Server Backup allows an authorized attacker to elevate privileges locally...

Microsoft PC Manager Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...

Windows Routing and Remote Access Service (RRAS) Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...