SZB-f91612e06a
EUVD lists link-following flaw in Velneo vServer (EUVD-2026-107308)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Velneo
- Product
- vServer
- First seen
Summary
The EU Vulnerability Database entry EUVD-2026-107308, as shared on Mastodon, describes an improper link resolution vulnerability in Velneo vServer. The entry scores it 6.0/10 (CVSS v3.1) and says it affects versions 32.3 to before 36.6 and 37.1 to before 37.2.
If you use Velneo
Check whether you run vServer 32.3 through 36.5 or 37.1.
Upgrade to vServer 36.6 or 37.2 or later.
Restrict local file access for service accounts until patched.
What the sources say 1
· Mastodon: “Improper link resolution before file access ('link following') vulnerability in Velneo vServer.” Source