Skip to content
CVE PROGRAM SOURCE RECORD6.0 Medium

CVE-2026-114462

Arbitrary File Read via Symlink in Velneo vServer HTTP Server

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Velneo

Description

Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServer: from 32.3 before 36.6 and from 37.1 before 37.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Velneo vServer

Default version status: unaffected

  • 36.0 to < 36.6affected
  • 37.0 to < 37.2affected
  • 36.6unaffected
  • 37.2unaffected

References