CVE-2026-114462
CVE-2026-114462 · Arbitrary File Read via Symlink in Velneo vServer HTTP Server
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServer: from 32.3 before 36.6 and from 37.1 before 37.2.
CVSS 6.0 · Medium · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
vserver
- Versions
- ≥ 36.0, < 36.6: Affected (custom)
- ≥ 37.0, < 37.2: Affected (custom)
- 36.6: Not affected (custom)
- 37.2: Not affected (custom)
Update to 36.6; Update to 37.2