Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CWE-61
Weakness type CWE-61 — authoritative definition at MITRE. A cumulative reference aggregating every published CVE mapped to this weakness class; not a page of record.
Totals
| CVEs all-time | CVEs YTD | KEV all-time |
|---|---|---|
| 55 | 55 | 1 |
Monthly trend
▂▂█▆▆▆▆
2026-04 1 · 2026-05 2 · 2026-06 13 · 2026-07 10 · 2026-08 10 · 2026-09 9 · 2026-10 10
Top CVEs
| CVE | CVSS | EPSS %ile | KEV | Title |
|---|---|---|---|---|
| CVE-2026-54420 | 8.5 | 56.0 | KEV | LiteSpeed cPanel Plugin |
| CVE-2026-91099 | 5.1 | 61.6 | — | HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities |
| CVE-2026-56748 | 8.7 | 59.6 | — | Authenticated RCE via Symlink Following in Cribl Stream Pack Git Import |
| CVE-2026-63125 | 9.9 | 50.7 | — | Incus vulnerable to root RCE via image backup.yaml symlink |
| CVE-2026-55447 | 9.6 | 50.7 | — | Langflow: BaseFileComponent-based nodes arbitrary file read with RCE exploit |
| CVE-2026-41937 | 8.6 | 49.0 | — | Vvveb < 1.0.8.3 Unrestricted File Upload RCE via Plugin Upload |
| CVE-2026-55168 | 6.5 | 48.1 | — | Runtipi: Authenticated arbitrary file write via backup restore symlink planting |
| CVE-2026-49248 | 8.3 | 46.0 | — | OneDev: RCE through absolute-path symlink following allows low-privileged users to over… |
| CVE-2026-41541 | 5.3 | 44.3 | — | Symlink creation in qsyncsrv.cgi |
| CVE-2026-62992 | 6.9 | 43.8 | — | Smarty: Symlink path traversal out of trusted directories |
| CVE-2026-56876 | 8.6 | 43.3 | — | extract-zip unvalidated symlink path traversal |
| CVE-2026-50612 | 9.4 | 40.6 | — | Import Symlink Following Remote Code Execution Vulnerability in QuMagie |
| CVE-2026-52811 | 9.0 | 39.6 | — | Gogs: UploadRepoFiles writes outside repo working tree via committed parent sym |
| CVE-2026-57825 | 5.7 | 39.4 | — | — |
| CVE-2026-17459 | 2.1 | 39.0 | — | perwendel spark SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlink |
| CVE-2026-55686 | 5.3 | 33.0 | — | Podman: WORKDIR symlink traversal vulnerability |
| CVE-2026-41326 | 8.2 | 29.5 | — | Kata Containers: CopyFile Policy Subversion via Symlinks |
| CVE-2026-107810 | 8.1 | 28.6 | — | Nginx UI: Backup restore follows crafted symlinks into the live Nginx configuration pat… |
| CVE-2026-97024 | 7.1 | 22.2 | — | Flatpak: flatpak: arbitrary write in root context via path traversal in deploy director… |
| CVE-2026-13201 | 7.3 | 22.1 | — | Kubevirt: virt-handler-rhel9: kubevirt: safepath symlink following in virt-handler enab… |
Most-affected vendors
| Vendor | CVEs |
|---|---|
| red hat | 8 |
| flatpak | 3 |
| dell | 2 |
| qnap systems | 2 |
| 0xjacky | 1 |
| @backstage/plugin-techdocs-node | 1 |
| amazon web services | 1 |
| anthropic | 1 |
| apple | 1 |
| asynchttpclient | 1 |
| backstage | 1 |
| containerd | 1 |
| containers | 1 |
| cribl | 1 |
| denji | 1 |
