Skip to content
OpenAdvisories
Medium · 6.0 CVE-2026-114462 EUVD-2026-107308GHSA-f689-pcwm-j2cm

Arbitrary File Read via Symlink in Velneo vServer HTTP Server

Published Oct 21, 2026 · Updated Oct 30, 2026 · Assigned by Velneo

Description

Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServer: from 32.3 before 36.6 and from 37.1 before 37.2.

Affected products

VendorProductAffectedFixed
Velneo vServer 36.0 – < 36.6, 37.0 – < 37.2 36.6

References