CVE-2026-15621 mosaxiv clawlet File Tools fs_ops.go edit_file link following

A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function readfile/writefile/editfile of the file tools/fsops.go of the component File Tools. Performing a manipulation results in link following. The attack needs to be approached locally. The reported GitHub issue was...

EUVD-2026-43598

A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function readfile/writefile/editfile of the file tools/fsops.go of the component File Tools. Performing a manipulation results in link following. The attack needs to be approached locally. The reported GitHub issue was...

EUVD-2026-43609

An issue in D-Link DIR-1253 v.1.0.1.250923.142435 allows an attacker to escalate privileges via the etc/shadow component file...

EUVD-2026-43597

setThemeRoot failed to enforce the sap-allowed-theme-origins allowlist. An attacker-controlled absolute cross-origin URL could be stored and used directly to construct a element, even when no tag was present in the document. The same bypass was reachable via the ?sap-themeRoot URL...

CVE-2026-44745 Open Redirect vulnerability in SAP Approuter

SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations. This allows an unauthenticated remote attacker to craft a malicious link which, when clicked by a victim, could lead to unauthorized access. Successful exploitation results...

EUVD-2026-43585

SAP Approuter does not properly validate incoming request headers during the OAuth2 login flow under certain configurations. This allows an unauthenticated remote attacker to craft a malicious link which, when clicked by a victim, could lead to unauthorized access. Successful exploitation results...

EUVD-2026-43583

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library DLL files from an untrusted location, allowing them to execute malicious code on the system. This could enable the attacker to hijack the DLL loading process and achieve arbitrary code execution. This has high impac...

PT-2026-58909

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symbolic link pointing...

PT-2026-58417

Name of the Vulnerable Software and Affected Versions Microsoft PC Manager versions prior to 3.22.1.0 Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally. Recommendations Update to version 3.22.1.0 via...

PT-2026-58715

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to perform local tampering. This occurs when the system does not properly validate symbol...

PT-2026-58203

Name of the Vulnerable Software and Affected Versions Windows Server Backup affected versions not specified Description An improper link resolution issue before file access, known as link following, allows an authorized attacker to elevate privileges locally. This flaw enables a low-privilege...

PT-2026-58163

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system...

The vulnerability of the PHP-FPM process manager, a PHP programming language interpreter, allows attackers to execute arbitrary JavaScript code (XSS).

The vulnerability of the PHP-FPM process manager, a PHP programming language interpreter, exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows an attacker to execute arbitrary JavaScript code XSS using a specially created URL address...

Security Update for Microsoft .NET Core SDK (July 2026)

The Microsoft .NET Core SDK installations on the remote host are missing a security update. It is, therefore, affected by a vulnerability as referenced in the vendor advisory. - Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering...

PT-2026-57980

Name of the Vulnerable Software and Affected Versions Bitdefender Total Security versions prior to 27.0.58.315 Bitdefender Internet Security versions prior to 27.0.58.315 Description An improper link resolution before file access, also known as link following, exists in the File Shredder module...

PT-2026-58153

Name of the Vulnerable Software and Affected Versions Universal Plug and Play upnp.dll affected versions not specified Description Improper link resolution before file access, also known as link following, occurs in the upnp.dll component. This allows an authorized attacker to disclose informatio...

UBUNTU-CVE-2026-50526

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

CVE-2026-57215

creationtimestamp| type| source ---|---|--- 2026-07-13 23:36:21+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkubeyy5c22...

CVE-2026-62194

creationtimestamp| type| source ---|---|--- 2026-07-13 23:10:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqkstf3jth2l 2026-07-15 11:37:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqomz5i76z22...

CVE-2026-62200

creationtimestamp| type| source ---|---|--- 2026-07-13 22:59:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqks6zjmmw2z 2026-07-15 10:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqojntm37626...