#link-following

1 stories this week · 2 this month · 6 in 6 months · mostly security

Stories per day · 30 days

4 stories, newest first · one card per story

A user must connect to a malicious server; ZDI rates the issue CVSS 7.5 and names no patch.

ZDI-26-832, tracked as CVE-2026-6064 and scored 7.3, needs existing low-privileged code execution.

ZDI disclosed CVE-2026-19820, a CVSS 6.1 local link-following denial-of-service flaw in the bzbackup component of Backblaze Personal Computer Backup.

A link-following flaw (CVE-2026-12410, CVSS 7.8) in Gen Digital CCleaner allows local privilege escalation after low-privileged code execution.

Stories tagged #link-following