SFTPGo < 2.7.4 Permission Bypass via Symbolic Link Creation
cve-program ·
Vendor product: SFTPGo
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
cve-program ·
Vendor product: SFTPGo
cve-program ·
Vendor product: surrealdb · Vendor product: surrealdb · Vendor product: surrealdb
cve-program ·
Vendor product: surrealdb · Vendor product: surrealdb · Vendor product: surrealdb
cve-program ·
Vendor product: surrealdb · Vendor product: surrealdb · Vendor product: surrealdb
cve-program ·
Vendor product: surrealdb · Vendor product: surrealdb · Vendor product: surrealdb
cve-program ·
Vendor product: surrealdb · Vendor product: surrealdb
cve-program ·
Vendor product: surrealdb · Vendor product: surrealdb · Vendor product: surrealdb
cve-program ·
Vendor product: surrealdb · Vendor product: surrealdb · Vendor product: surrealdb
cve-program ·
Vendor product: surrealdb · Vendor product: surrealdb · Vendor product: surrealdb
cve-program ·
Vendor product: Hono
cve-program ·
Vendor product: Flowise
cve-program ·
Vendor product: Experience Manager · Vendor product: Experience Platform
cve-program ·
Vendor product: WBCE CMS
cve-program ·
Vendor product: direwolf
cve-program ·
Vendor product: direwolf
cve-program ·
Vendor product: Nuclias Connect
cve-program ·
Vendor product: Disk Pulse Enterprise
cve-program ·
Vendor product: Karel IP Phone IP1211
cve-program ·
Vendor product: CompletePBX
cve-program ·
Vendor product: Hirschmann HiOS Switch Platform
cve-program ·
Vendor product: SPIP
cve-program ·
Vendor product: Retool
cve-program ·
Vendor product: surrealdb · Vendor product: rquickjs
cve-program ·
Vendor product: surrealdb · Vendor product: surrealdb · Vendor product: surrealdb-core
cve-program ·
Vendor product: MultiHaul TG series
cve-program ·
Vendor product: CE Phoenix
cve-program ·
Vendor product: Obi08/Enrollment System
cve-program ·
Vendor product: Easywall
cve-program ·
Vendor product: FVS336Gv3 · Vendor product: FVS336Gv2
cve-program ·
https://rubygems.org: audited
cve-program ·
Vendor product: PMB
osv · CVE-2026-106764
npm: @rog0x/mcp-git-tools
osv · CVE-2026-106763
npm: @justice8096/sagemath-mcp-server
cve-program ·
Vendor product: Hubstaff
cve-program ·
Vendor product: Backup Plugin
cve-program ·
Vendor product: Buddypress Xprofile Custom Fields Type
cve-program ·
Vendor product: Woody Code Snippets
cve-program ·
Vendor product: Car Park Booking WordPress Plugin
cve-program ·
Vendor product: Hirschmann Industrial HiVision
cve-program ·
Vendor product: Appointment Booking Calendar
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
cve-program ·
Vendor product: hMailServer
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.