high7.8
CVE-2026-119336
Pi-hole: arbitrary root file clobber / chmod / disclosure via updatecheck.sh cron following /etc/pihole/versions symlink
pi-hole · pi-hole
Your agent Now with CVE context
Find published vulnerabilities, affected versions, and available fixes.
Bring the source evidence into your coding agent to investigate what affects your project.
Sponsored by MoxsoBuild security habits with adaptive training and phishing simulations.Opens in a new tabORIGINAL EVIDENCE. READY FOR YOUR WORKFLOW.CVE / OSV / CISA KEV
Find vulnerabilities that affect you.
Explore advisories by severity, ecosystem, and known exploitation. Take the evidence into your next agent session.
Severity
103 matching advisories · 30 shown
Follow substantive record changes →SEVERITYVULNERABILITY / AFFECTED PACKAGESPUBLISHED
low2.2
CVE-2026-119334
Pi-hole: file:// adlist read check and curl can resolve different files
pi-hole · pi-hole
high7.3
CVE-2026-116250
pgAdmin 4: Files opened in a storage directory follow a symbolic link, hard link or FIFO planted after the containment check
pgadmin.org · pgAdmin 4
medium5.5
CVE-2026-119291
zuke setup and zuke import follow symbolic links planted at scaffold names, allowing writes outside the target directory
zuke-build · zuke
medium6.8
CVE-2026-119704
Bastille through 1.4.4 Jail Escape via Symlink Following in cp, rcp, jcp
BastilleBSD · bastille
unknown
medium6.0
CVE-2026-119364
ProFTPD through 1.3.9e and 1.3.10rc4 mod_copy Symlink Following Write Bypass
ProFTPD Project · ProFTPD
high8.8
CVE-2026-119168
Nomad allocation data migration may allow host directory permission modification via symlink following
HashiCorp · Nomad / HashiCorp · Nomad Enterprise
high8.4
CVE-2026-107347
Nomad dispatch payload writes can escape the allocation directory through symlinks
HashiCorp · Nomad / HashiCorp · Nomad Enterprise
high7.5
CVE-2026-115713
Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Modification
Elastic · Elastic Cloud Enterprise
high8.2
CVE-2026-115709
Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Information Disclosure and Data Loss
Elastic · Elastic Cloud Enterprise
high7.2
CVE-2026-115708
Improper Link Resolution Before File Access ('Link Following') in Elastic Cloud Enterprise (ECE) Leading to Authentication Bypass
Elastic · Elastic Cloud Enterprise
unknown
high8.8
CVE-2026-103401
Session Smart Router and Session Smart Conductor: An attacker can overwrite arbitrary files as root
Juniper Networks · Session Smart Router / Juniper Networks · Session Smart Conductor
high7.3
CVE-2026-6064
Norton, Avast, and AVG local privilege escalation via link following in Data Shredder
Gen Digital · Norton Antivirus / Gen Digital · Avast Antivirus
high8.6
high7.8
CVE-2026-108306
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Tanium · Endpoint Configuration Toolset Solution / Tanium · end-user-cx
medium6.3
CVE-2026-108332
Tanium addressed an improper link resolution before file access vulnerability in Threat Response Client Extension.
Tanium · Endpoint Configuration Toolset Solution / Tanium · threat-response-cx
high7.8
CVE-2026-108304
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Tanium · Endpoint Configuration Toolset Solution / Tanium · end-user-cx
high7.8
CVE-2026-108305
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Tanium · Endpoint Configuration Toolset Solution / Tanium · end-user-cx
low3.3
high7.2
CVE-2026-90464
Fireware OS Missing Command Validation allows Authenticated Arbitrary File Modification as Root
WatchGuard · Fireware OS / WatchGuard · Fireware OS
high7.1
CVE-2026-93864
Fireware OS Link Following in firewalld Allows Local Arbitrary File Overwrite as Root
WatchGuard · Fireware OS / WatchGuard · Fireware OS
medium5.8
high7.4
high7.6
CVE-2026-112344
Syncplify Server! 6.0.0 < 8.8.0 Symbolic Link Jail Escape
Syncplify, Inc. · Syncplify Server!
medium6.9
CVE-2026-116213
Webasyst Framework through 4.4.0 Arbitrary File Read via waArchiveTar Symlinks
Webasyst · Webasyst Framework
low3.3
CVE-2026-115569
Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project root
fallow-rs · fallow / @fallow-cli · fallow-node
critical10.0
CVE-2026-110063
VM Inspector for Azure Virtual Machines Elevation of Privilege Vulnerability
Microsoft · VM Inspector for Azure Virtual Machines
critical9.9