EUVD-2026-43583

SAProuter on Microsoft Windows allows an unauthenticated attacker to load library DLL files from an untrusted location, allowing them to execute malicious code on the system. This could enable the attacker to hijack the DLL loading process and achieve arbitrary code execution. This has high impac...

Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeover

Summary The official Kimai Docker image ships with APPSECRET=changethistosomethingunique as the default environment variable. The Docker entrypoint does not override or validate this value. Any Kimai instance deployed using the Docker image without explicitly setting APPSECRET runs with a...

PT-2026-58445

Name of the Vulnerable Software and Affected Versions Windows Projected File System affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At...

PT-2026-58163

Name of the Vulnerable Software and Affected Versions Windows Routing and Remote Access Service RRAS affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system...

PT-2026-58203

Name of the Vulnerable Software and Affected Versions Windows Server Backup affected versions not specified Description An improper link resolution issue before file access, known as link following, allows an authorized attacker to elevate privileges locally. This flaw enables a low-privilege...

PT-2026-58715

Name of the Vulnerable Software and Affected Versions .NET affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to perform local tampering. This occurs when the system does not properly validate symbol...

PT-2026-58909

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symbolic link pointing...

UBUNTU-CVE-2026-50526

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

CVE-2026-48038: Uncaught Exception

joi is a schema description language and data validator for JavaScript. Prior to 17.13.4 and 18.2.1, denial of service is possible via an untrapped exception in services validating user-supplied JSON or object input with recursive link schemas. When validate is called without try/catch in a reque...

CVE-2026-50526: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in .NET allows an authorized attacker to perform tampering locally...

CVE-2026-5040: Use of Password Hash With Insufficient Computational Effort

TP-Link Deco M5 v1 uses a weak password hashing mechanism to store user credentials. An attacker who obtains the password hash through system compromise or privileged access could perform brute-force or dictionary attacks. Successful exploitation may result in disclosure of authentication...

CVE-2026-50469: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Projected File System allows an authorized attacker to elevate privileges locally...

CVE-2026-50364: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Server Backup allows an authorized attacker to elevate privileges locally...

CVE-2026-49791: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Routing and Remote Access Service RRAS allows an authorized attacker to elevate privileges locally...

CVE-2026-49180: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Universal Plug and Play upnp.dll allows an authorized attacker to disclose information locally...

CVE-2026-58636: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Window PC Manager allows an authorized attacker to elevate privileges locally...

CVE-2026-6851: Improper Link Resolution Before File Access

An Improper link resolution before file access 'link following' vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue...

CVE-2026-15629: Improper Link Resolution Before File Access

A weakness has been identified in louisho5 picobot up to 0.2.0. Impacted is the function CreateSkill/GetSkill of the file internal/agent/tools/filesystem.go of the component Workspace Handler. Executing a manipulation can lead to link following. It is possible to launch the attack remotely. The...

CVE-2026-15621: Improper Link Resolution Before File Access

A vulnerability was detected in mosaxiv clawlet up to 0.2.10. This impacts the function readfile/writefile/editfile of the file tools/fsops.go of the component File Tools. Performing a manipulation results in link following. The attack needs to be approached locally. The reported GitHub issue was...

CVE-2026-50438: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Microsoft PC Manager allows an authorized attacker to elevate privileges locally...