https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T06:09:31.053458+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-292591 EUVD-2026-292591 2026-10-03T06:09:31.123921+00:00 EUVD-2026-292591 https://cve.radiocsirt.org/vuln/fkie_cve-2026-35372 fkie_cve-2026-35372 2026-10-03T06:09:31.123964+00:00

A logic error in the ln utility of uutils coreutils allows the utility to dereference a symbolic link target even when the --no-dereference (or -n) flag is explicitly provided. The implementation previously only honored the "no-dereference" intent if the --force (overwrite) mode was also enabled. This flaw causes ln to follow a symbolic link that points to a directory and create new links inside that target directory instead of treating the symbolic link itself as the destination. In environments where a privileged user or system script uses ln -n to update a symlink, a local attacker could manipulate existing symbolic links to redirect file creation into sensitive directories, potentially leading to unauthorized file creation or system misconfiguration.

 https://cve.radiocsirt.org/vuln/ghsa-wq63-vh5h-pr5p GHSA-wq63-vh5h-pr5p — uutils coreutils has a UNIX Symbolic Link (Symlink) Following issue 2026-10-03T06:09:31.124005+00:00

Affected: crates.io: coreutils

A logic error in the ln utility of uutils coreutils allows the utility to dereference a symbolic link target even when the --no-dereference (or -n) flag is explicitly provided. The implementation previously only honored the "no-dereference" intent if the --force (overwrite) mode was also enabled. This flaw causes ln to follow a symbolic link that points to a directory and create new links inside that target directory instead of treating the symbolic link itself as the destination. In environments where a privileged user or system script uses ln -n to update a symlink, a local attacker could manipulate existing symbolic links to redirect file creation into sensitive directories, potentially leading to unauthorized file creation or system misconfiguration.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-35372 UBUNTU-CVE-2026-35372 2026-10-03T06:09:31.124035+00:00

Affected: Ubuntu:24.04:LTS: rust-coreutils, Ubuntu:25.10: rust-coreutils

A logic error in the ln utility of uutils coreutils allows the utility to dereference a symbolic link target even when the --no-dereference (or -n) flag is explicitly provided. The implementation previously only honored the "no-dereference" intent if the --force (overwrite) mode was also enabled. This flaw causes ln to follow a symbolic link that points to a directory and create new links inside that target directory instead of treating the symbolic link itself as the destination. In environments where a privileged user or system script uses ln -n to update a symlink, a local attacker could manipulate existing symbolic links to redirect file creation into sensitive directories, potentially leading to unauthorized file creation or system misconfiguration.