CWE-61 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-61 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
● 실제 악용이 확인됨CVE-2026-54420LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishand…1.4%높음8.5CVE-2026-41541An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central. I…0.5%보통5.3CVE-2026-50612An unix symbolic link (symlink) following vulnerability has been reported to affect QuMagie. If a re…0.5%심각9.4CVE-2026-115908zip is a zip library for Rust that supports reading and writing simple ZIP files. From 7.2.0 until 9…0.4%높음7.4CVE-2026-107810Nginx UI is a web user interface for the Nginx web server. From 2.0.0 until 2.5.0, internal/backup/r…0.4%높음8.1CVE-2026-91099HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The find…0.3%보통5.1CVE-2026-57825In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can be bypassed because…0.3%보통5.7CVE-2026-106507Backstage is an open framework for building developer portals. Prior to 1.15.4, the @backstage/plugi…0.3%보통5.3
전체 목록
27건
CVE-2026-97024A path traversal vulnerability in Flatpak's handling of the files/etc directory during app deployment allows a…0.3%높음7.1
CVE-2026-107174A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize …0.3%보통6.4
CVE-2026-97023A path traversal vulnerability in Flatpak's handling of the export/bin directory during app deployment allows …0.3%높음7.1
CVE-2026-119336Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side softw…0.2%높음7.8
CVE-2026-118688wasmtime-wasi in Wasmtime before 36.0.18, 37.0.0 before 48.0.6, and 49.0.0 before 49.0.3 re-appends a trailing…0.2%높음8.8
CVE-2026-115392Wasmtime before 24.0.13, 25.0.0 before 36.0.14, 37.0.0 before 46.0.3, and 47.0.0 before 47.0.4 allows a filesy…0.2%높음8.8
CVE-2026-103435Claude Code validated that a target file path resided within the project working directory at permission-check…0.3%높음7.7
CVE-2026-90616In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read and write access to files on the…0.2%높음7.4
CVE-2026-77159A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a pat…0.2%보통5.5
CVE-2026-115424A flaw was found in the OpenShift client oc. When extracting container image layers with oc image extract, the…0.2%보통5.5
CVE-2026-91202A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a di…0.2%보통6.1
CVE-2026-105712gpgtar in GnuPG before 2.5.19 can allow file overwrite via crafted data in an archive. When extracting an untr…0.1%낮음3.6
CVE-2026-96807In Flatpak before 1.18.1, a malicious sandboxed app can replace ~/.var/app/$appid/.ld.so with a symlink, causi…0.1%보통4.0
CVE-2026-106566ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to 7.1.2-…0.1%보통4.0
CVE-2026-96808In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper to receive repository data fr…0.1%높음7.4
CVE-2026-108981ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx an…0.1%낮음3.6
CVE-2026-102740The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP …0.1%보통5.8
CVE-2026-121520In BuildKit versions prior to v0.34.1, a malicious client with access to the BuildKit control APIs can submit …보통4.5
CVE-2026-65109NVIDIA Slurm is subject to a symlink resolution issue in the container cleanup code that could allow an attack…보통4.7
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.