EUVD-2026-56603

Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...

EUVD-2026-56601

Improper link resolution before file access 'link following' in Windows Management Services allows an authorized attacker to deny service locally...

EUVD-2026-56391

Improper link resolution before file access 'link following' in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

CVE-2026-66484

A flaw was found in GNU cpio. This vulnerability, known as Path Traversal, occurs during the extraction of tar archives in copy-in mode when the --no-absolute-filenames option is used. A remote attacker could craft a malicious tar archive containing a hard-link entry with an absolute path. This...

Windows User Profile Service Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows User Profile Service allows an authorized attacker to elevate privileges locally...

Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability

Improper link resolution before file access 'link following' in Windows Container Isolation FS Filter Driver unionfs.sys allows an authorized attacker to perform tampering locally...

Windows Management Services Denial of Service Vulnerability

Improper link resolution before file access 'link following' in Windows Management Services allows an authorized attacker to deny service locally...

Windows DHCP Server Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

Windows DHCP Server Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

Windows DHCP Server Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

Windows DHCP Server Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

Windows DHCP Server Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows DHCP Server allows an authorized attacker to elevate privileges locally...

Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Windows Accessibility Infrastructure ATBroker.exe allows an authorized attacker to elevate privileges locally...

CVE-2026-72597

A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch allows authenticated users with a free self-registered account to probe internal network services via the link-preview endpoint. The endpoint fetches any user-supplied URL without applying an internal IP deny...

CVE-2026-72597 Friendica Friendica - Server-Side Request Forgery

A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch allows authenticated users with a free self-registered account to probe internal network services via the link-preview endpoint. The endpoint fetches any user-supplied URL without applying an internal IP deny...

EUVD-2026-56036

A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch allows authenticated users with a free self-registered account to probe internal network services via the link-preview endpoint. The endpoint fetches any user-supplied URL without applying an internal IP deny...

CVE-2026-72597

A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch allows authenticated users with a free self-registered account to probe internal network services via the link-preview endpoint. The endpoint fetches any user-supplied URL without applying an internal IP deny...

CVE-2026-72597

CVE-2026-72597 affects Friendica (2026.08-dev branch). The vulnerability is a server-side request forgery (SSRF) in the link-preview endpoint, which fetches a user-provided URL without an internal IP deny list. This allows an authenticated user with a free self-registered account to probe interna...

CVE-2026-72597 Friendica Friendica - Server-Side Request Forgery

A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch allows authenticated users with a free self-registered account to probe internal network services via the link-preview endpoint. The endpoint fetches any user-supplied URL without applying an internal IP deny...

CVE-2026-19516 CVE-2026-19516 CVE Record

A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafanaapirequest tool lets the caller also choose the HTTP method, path, and body. Because the destination is not restricted to the configured Grafana instance, a caller can direct...