CVE-2026-68491
CriticalCVSS 9.4Summary
An insufficient check allowed for the overwrite of arbitrary files via a symlink. Technical details were not provided in the description.
Risk Assessment
An attacker can overwrite arbitrary files on the system, potentially leading to system corruption or code execution. This may result in loss of data integrity and service unavailability.
Recommendation
Apply the vendor patch that fixes the vulnerability. Until patched, restrict the ability to create symbolic links in user-writable directories.
Other vulnerabilities in Nieokreślony
See all- CVE-2026-66890Critical
The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable. Technical details were not provided in the description.
- CVE-2026-66887Critical
The affected products are missing authorization on state-changing CGIs and session checks are not performed. Technical details were not provided in the description.
Original NVD description (English source)
An insufficient check allowed for the overwrite of arbitrary files via a symlink.