Catalog

Findings

Filter the merged record by severity, source, stack, and weakness type.

SearchSeveritySourceStackWeaknessSort

Known exploited only

Critical9.4An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie.CVE-2026-50612 · QNAP Systems Inc. · QuMagie · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.5%Oct 15, 2026
Medium5.3An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central.CVE-2026-41541 · QNAP Systems Inc. · Qsync Central · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · QNAPEPSS 0.5%Oct 15, 2026
Low3.6ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the sa…CVE-2026-108981 · CVE.org · FIRST EPSS · NIST NVD · nginx, WordPressEPSS 0.1%Oct 12, 2026
Medium6.5Runtipi is a personal homeserver orchestrator.CVE-2026-55168 · CVE.org · FIRST EPSS · NIST NVDEPSS 0.6%Aug 21, 2026
High8.5LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following VulnerabilityCVE-2026-54420 · LiteSpeed · cPanel Plugin · CISA KEV · CVE.org · FIRST EPSS · cPanel, LiteSpeedKEVEPSS 0.8%Jun 13, 2026
Medium5.5Static Web Server (SWS) is a production-ready web server suitable for static web files or assets.CVE-2025-67487 · static-web-server · static web server · CVE.org · FIRST EPSS · NIST NVDEPSS 0.4%Dec 9, 2025