CVE-2026-86509 D-Link DIR-895L udhcpcd serverpacket.c sendACK stack-based overflow

A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...

CVE-2026-86509

A stack-based buffer overflow exists in the udhcpcd component (specifically the sendOffer/sendACK functions in serverpacket.c) of the D-Link DIR-895L (A1, firmware 102b07). An attacker on the same local network can trigger the flaw without authentication, achieving complete impact to confidential...

EUVD-2026-72608

A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...

CVE-2026-76961 Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA (Finance for Advanced Payment Management)

SAP S/4HANA Finance Advanced Payment Management does not perform sufficient Cross-Site Request Forgery protection on certain requests, due to this an attacker with low privileges could craft a malicious link or page. If an authenticated victim interacts with it, unintended actions could be...

CVE-2026-76959

A Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4HANA Finance (Advanced Payment Management) stems from insufficient CSRF protection on certain requests. An attacker with low privileges can craft a malicious link or page that, when interacted with by an authenticated victim, triggers un...

PT-2026-87417

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally. This issue involves a Time-of-Check to Time-of-Use...

PT-2026-88425

Maono Link 3.8.13 MaonoAiServices Windows service allows local privilege escalation for a standard user account via improper write privileges in 'C:ProgramDataMaono'. Fixed in 4.0.80...

CVE-2026-86509: Stack-based Buffer Overflow

A flaw has been found in D-Link DIR-895L A1102b07. This impacts the function sendOffer/sendACK of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack can only be done within the local network. The exploit has been published an...

CVE-2026-67368: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-69289: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Setup Files Cleanup allows an authorized attacker to elevate privileges locally...

CVE-2026-70563: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-69771: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally...

CVE-2026-78622: Improper Link Resolution Before File Access

The Okta Verify for Windows uninstaller does not verify whether the user data directory is a filesystem junction before deleting its contents with elevated privileges. The delete operation follows the junction target, resulting in recursive deletion of unintended directory contents...

PT-2026-90531

Уязвимость модуля защиты от вредоносных программ Microsoft Malware Protection Engine средства антивирусной защиты Microsoft Defender связана с некорректным определением символических ссылок перед доступом к файлу. Эксплуатация уязвимости может позволить нарушителю получить несанкционированный...

CVE-2026-69379: Improper Link Resolution Before File Access

Improper link resolution before file access 'link following' in Windows NTFS allows an authorized attacker to elevate privileges locally...

PT-2026-88087

The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link...

PT-2026-88144

Improper link resolution before file access 'link following' in Windows Resilient File System ReFS Deduplication Service allows an authorized attacker to elevate privileges locally...

PT-2026-87223

Improper link resolution before file access 'link following' in SQL Server allows an authorized attacker to elevate privileges over a network...

PT-2026-87336

Name of the Vulnerable Software and Affected Versions Windows Setup Files Cleanup affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to elevate privileges locally on the system. Recommendations At th...

PT-2026-87456

Name of the Vulnerable Software and Affected Versions Windows NTFS affected versions not specified Description Improper link resolution before file access, also known as link following, allows an authorized attacker to perform local tampering. This issue occurs when the system does not correctly...