Skip to content

/

ZeroHour

ZeroHour aggregates public sources — security and AI press, vendor advisories, NVD, CISA KEV, FIRST EPSS, leak-site trackers and Have I Been Pwned — and classifies them with AI. Summaries can be wrong: read the original. All times are UTC.

News CVEs Incidents Tags Daily brief Traffic Sources RSS & API Kiosk Health Sitemap

Home
News feed
Exploited now

Security

CVEs
Ransomware & breaches
Threat actors & entities
IOCs

AI

AI & models

Explore

Tags
Daily brief
Analytics
Traffic & readers
Ask the feed
Sources

You

Watchlist
Saved
RSS, API & alerts

#symlink — news, CVEs and analysis · ZeroHour

today 46 visits · 59 views · 7 reads·all time 17K views

07:57 UTC· 7m ago

Tag

#symlink

3 stories this week · 11 this month · 11 in 6 months · mostly security

stories per day · 30 days

Related#sandbox-escape 4 #docker 3 #macos 3 #path-traversal 3 #virtio-fs 3 #ai-agents 2 #filesystem 2 #mcp 2 #0day 1 #ai-coding-agents 1 #ai-tooling 1 #apache 1 #apache-storm 1 #archive-extraction 1 #blobstore 1 #buildstream 1 #busybox 1 #coercion 1

11 stories, newest first · one card per story

oss-security·3d ago

[kubernetes] CVE-2026-76654: Subpath symlinking on Windows nodes permits NTLM coercion

#kubernetes #cve-2026-76654 #ntlm

CVE-2026-76654

Ubuntu Security Notices·3d ago

USN-8287-2: XDG Desktop Portal regression

#ubuntu #xdg-desktop-portal #cve-2026-40354

CVE-2026-40354

oss-security·3d ago

CVE-2026-82331: Apache BuildStream: tar source extraction escape

#cve-2026-82331 #apache #buildstream

CVE-2026-82331

The Hacker News·9d ago high

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

#ai-coding-agents #docker #docker-sandboxes

4 min

Cyber Security News·9d ago high

Critical Docker Sandbox Vulnerabilities Enable Malicious Guests to Escape Isolated microVM Workspaces

#ai-agents #docker #macos

3 min

GBHackers·10d ago high

Docker Sandboxes Vulnerabilities Let Malicious Guests Escape Workspace and Access Host Files

#container-escape #docker #macos

4 min1

ZDI Published Advisories·11d ago

ZDI-26-705: (0Day) BusyBox libarchive Symlink Directory Traversal Arbitrary File Creation Vulnerability

#0day #busybox #directory-traversal

CVE-2026-92205

oss-security·12d ago

Cpython: [CVE-2026-82049] tarfile extraction filters allow file modification and content disclosure via hard link to symlink

#archive-extraction #cpython #python

CVE-2026-82049

1

oss-security·13d ago

CVE-2026-82427: Apache Storm Nimbus: Path Traversal as the Supervisor User via Unsanitised Blobstore Map Local Name

#apache-storm #blobstore #cve-2026-82427

CVE-2026-82427

1

oss-security·17d ago

iceener/files-stdio-mcp-server: sandbox escape in fs_search via a symlinked directory (recursive walker validates only the top level)

#ai-tooling #files-stdio-mcp-server #filesystem

Vulnerability

oss-security·17d ago

Survey of filesystem MCP servers: how the "sandboxed filesystem" boundary is enforced (one breach, four defended-by-design)

#ai-agents #filesystem #mcp

Vulnerability

1