EUVD-2026-45980

dataCycle is a data management system for centrally storing, managing, searching, finding, and distributing data. In dataCycle-CORE, the module handling core processing and framework rules, before and including version 25.07.3, anyone with a DataLink UUID can fetch the attached text file directly...

CVE-2026-12080

A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command handler by manipulating symbolic links. This can occur either through a deterministic directory-symlink bypass or a Time-of-Check to Time-of-Use TOCTOU...

CVE-2026-64057

A flaw was found in the Linux kernel's AFS Andrew File System component. This vulnerability involves incorrect locking when processing symbolic links, which can lead to race conditions and memory leaks. These issues could result in resource exhaustion and impact system stability...

CVE-2026-63811

creationtimestamp| type| source ---|---|--- 2026-07-20 09:52:12+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr2zi5z7to2o 2026-07-20 09:52:14+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mr2zi7ln562w 2026-07-20 09:52:16+00:00| seen|...

CVE-2026-16242

creationtimestamp| type| source ---|---|--- 2026-07-20 08:22:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mr2ugysfwu2e 2026-07-20 08:31:04+00:00| seen| https://bsky.app/profile/suriq.io/post/3mr2ux2hzsc2u 2026-07-20 09:25:32+00:00| seen|...

CVE-2026-42566

creationtimestamp| type| source ---|---|--- 2026-07-20 01:00:23+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mr23r6goaq2o 2026-07-20 01:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116949714689412114 2026-07-20 01:30:29+00:00| seen|...

CVE-2026-44359

creationtimestamp| type| source ---|---|--- 2026-07-20 00:00:37+00:00| seen| https://infosec.exchange/users/offseq/statuses/116949361347720615 2026-07-20 00:00:38+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mqzygdpesx2r 2026-07-20 01:00:29+00:00| seen|...

PT-2026-61670

Name of the Vulnerable Software and Affected Versions ExtremeXOS EXOS affected versions not specified Description The mv, cp, and rm file utilities within the shell environment fail to safely canonicalize paths and follow symbolic links outside of the intended privilege boundary. This allows an...

BIT-RCLONE-2026-54572 rclone: Unvalidated symlink target in local `--links` — arbitrary file write from an untrusted remote

Rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.74.4, with -l/--links, rclone serializes symlinks as .rclonelink text objects and recreates them on a local destination without validating the target, allowing an...

CVE-2026-64057

The CVE-2026-64057 entry concerns the Linux kernel AFS (Andrew File System) subsystem and a locking flaw around symbolic links processed by afs_get_link(). The root causes described across sources are: (1) no locking around afs_read_single() to prevent races between concurrent ->get_link() cal...

CVE-2026-64057

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the locking used by afsgetlink The afs filesystem in the kernel doesn't do locking correctly for symbolic links. There are a number of problems: 1 It doesn't do any locking around afsreadsingle to prevent races between...

CVE-2026-16227

creationtimestamp| type| source ---|---|--- 2026-07-19 12:44:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqyso7g4eb2a 2026-07-19 13:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/116946883494385034 2026-07-19 13:30:29+00:00| seen|...

PT-2026-61374

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The afs filesystem in the kernel implements incorrect locking for symbolic links. This leads to several issues, including a lack of locking around the afs read single function, which can...

CVE-2026-9323

creationtimestamp| type| source ---|---|--- 2026-07-18 14:34:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqwicdxykb2z 2026-07-18 15:00:32+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mqwjrntoau2w 2026-07-18 16:39:55+00:00| seen|...

CVE-2026-54335

creationtimestamp| type| source ---|---|--- 2026-07-17 23:55:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqux7yi36n2j 2026-07-18 00:00:07+00:00| seen| https://bsky.app/profile/amadeustech.bsky.social/post/3mquxhjsacv2x...

CVE-2026-45785

OpenMcdf is a fully .NET / C library to manipulate Compound File Binary File Format files, also known as Structured Storage. In 3.1.3 and earlier, the BST name-lookup loop in DirectoryTree.TryGetDirectoryEntry OpenMcdf/DirectoryTree.cs:35-46 walks directory entries by repeatedly calling...

GO-2026-5930 New API: SSRF Protection Bypass via Unresolved Hostname in Notification URLs in github.com/QuantumNous/new-api

New API: SSRF Protection Bypass via Unresolved Hostname in Notification URLs in github.com/QuantumNous/new-api...

CVE-2026-56171

creationtimestamp| type| source ---|---|--- 2026-07-17 14:00:06+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvwo4v522y 2026-07-17 14:00:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mqtvwt7bfv2z 2026-07-17 19:29:06+00:00| seen|...

CVE-2026-16072 Keycloak-services: keycloak-services: organization invitation link exposure allows unauthorized member creation

A flaw was found in the organization management component of Keycloak. A delegated administrator with permission to manage organizations can create an invitation for a non-existent email address and then retrieve the secret registration link directly through the application programming interface...

CVE-2026-14956

creationtimestamp| type| source ---|---|--- 2026-07-17 02:40:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqspwyuihy2i 2026-07-17 02:46:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mqsqbg6u4i25...