Description
Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServer: from 32.3 before 36.6 and from 37.1 before 37.2.
Published: 2026-10-21
Score: 6 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

Vendor Solution

The vulnerability is patched in versions 36.6  and 37.2

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

References
Link Providers
https://velneo.es/avisos-de-seguridad/ cve-icon cve-icon
History

Wed, 21 Oct 2026 17:15:00 +0000

Type Values Removed Values Added
Description Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServer: from 32.3 before 36.6 and from 37.1 before 37.2.
Title Arbitrary File Read via Symlink in Velneo vServer HTTP Server
First Time appeared Velneo
Velneo vserver
Weaknesses CWE-59
CPEs cpe:2.3:a:velneo:vserver:*:*:*:*:*:*:*:*
cpe:2.3:a:velneo:vserver:36.6:*:*:*:*:*:*:*
cpe:2.3:a:velneo:vserver:37.2:*:*:*:*:*:*:*
Vendors & Products Velneo
Velneo vserver
References
Metrics cvssV4_0

{'score': 6, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N'}

Subscriptions

Velneo Vserver
cve-icon MITRE

Status: PUBLISHED

Assigner: Velneo

Published:

Updated: 2026-10-21T15:02:31.893Z

Reserved: 2026-10-21T14:49:51.377Z

Link: CVE-2026-114462

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-21T16:17:33.953

Modified: 2026-10-21T16:17:33.953

Link: CVE-2026-114462

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses