https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 18:22:04 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-18348 <p>Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NETWORK ACL permission boundary. This enables internal network reconnaissance via port oracle and potential data exfiltration to external endpoints.</p> <p>Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NETWORK ACL permission boundary. This enables internal network reconnaissance via port oracle and potential data exfiltration to external endpoints.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-18348 https://vulnerability.circl.lu/vuln/ghsa-qx94-26r3-gv6g <p>Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NETWORK ACL permission boundary. This enables internal network reconnaissance via port oracle and potential data exfiltration to external endpoints.</p> <p>Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NETWORK ACL permission boundary. This enables internal network reconnaissance via port oracle and potential data exfiltration to external endpoints.</p> https://vulnerability.circl.lu/vuln/ghsa-qx94-26r3-gv6g https://vulnerability.circl.lu/vuln/opensuse-su-2026:12070-1 <p>velociraptor-0.76.7.0.git145.b60ef1146-1.1 on GA media</p> <p>velociraptor-0.76.7.0.git145.b60ef1146-1.1 on GA media</p> https://vulnerability.circl.lu/vuln/opensuse-su-2026:12070-1