UNIX Symbolic Link (Symlink) Following

Every one of the 189 is a mark on the map. Named now: 1 to 26, most at risk first.

1. LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provided by a user with FTP or web shell access on a shared hostin…CVE-2026-54420LiteSpeed Technologies · CVSS 8.5 · 1.4% likelycovered by CyberSIXT

   LiteSpeed Technologies1 article

2. Judge0 vulnerable to Sandbox Escape Patch Bypass via chown running on Symbolic LinkCVE-2024-28189judge0 · CVSS 10 · 7.2% likely
3. Judge0 vulnerable to Sandbox Escape via Symbolic LinkCVE-2024-28185judge0 · CVSS 10 · 7.1% likely
4. kubectl cp allows symlink directory traversalCVE-2019-11249Kubernetes · CVSS 4.8 · 3.7% likely

   Kubernetes

5. kubectl cp allows symlink directory traversalCVE-2019-11246Kubernetes · CVSS 6.4 · 3.6% likely

   Kubernetes

6. Unauthorized File Access in npm CLI before before version 6.13.3CVE-2019-16775npm · CVSS 7.7 · 2.9% likely

   Npm, Inc.

7. A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' escape the configured share path. This flaw allows a remote use…CVE-2022-3592samba · CVSS 6.5 · 2.8% likely
8. kubectl cp allows symlink directory traversalCVE-2019-11251Kubernetes · CVSS 4.8 · 2.6% likely

   Kubernetes

9. ReFirm Labs binwalk Archive Extraction extractor.py symlinkCVE-2021-4287ReFirm Labs · CVSS 5 · 2.1% likely
10. Flatpak has a complete sandbox escape leading to host file access and code execution in the host contextCVE-2026-34078flatpak · CVSS 9 · 1.7% likely

    Flatpak

11. QSAN Storage Manager - UNIX Symbolic Link (Symlink) FollowingCVE-2021-32518QSAN · CVSS 7.5 · 1.7% likely

    QSAN

12. QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileviewDoc functionCVE-2021-32509QSAN · CVSS 6.5 · 1.3% likely

    QSAN

13. QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileStreaming functionCVE-2021-32508QSAN · CVSS 6.5 · 1.3% likely

    QSAN

14. Cisco StarOS for Cisco ASR 5000 Series Routers Arbitrary File Read VulnerabilityCVE-2021-1145Cisco · CVSS 6.5 · 1.3% likely

    Cisco

15. runc container escape via "masked path" abuse due to mount race conditionsCVE-2025-31133opencontainers · CVSS 7.3 · 1.2% likely

    Opencontainers

16. Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-serverCVE-2022-24904argoproj · CVSS 4.3 · 1.2% likely

    Argoproj

17. local privilege escalation in SUSE postgresql init scriptCVE-2017-14798suse · CVSS 7.3 · 1.0% likely

    SUSE

18. HP Linux Imaging and Printing (HPLIP) Software– Multiple VulnerabilitiesCVE-2026-91099HP Inc. · CVSS 5.1 · 1.0% likely

    HP

19. Authenticated RCE via Symlink Following in Cribl Stream Pack Git ImportCVE-2026-56748Cribl · CVSS 8.8 · 0.9% likely

    Cribl

20. Unsafe symlink following in restricted workspace-write sandbox leads to RCECVE-2025-55345CVSS 8.8 · 0.9% likely
21. Symlink following allows leaking out-of-bounds YAML files from Argo CD repo-serverCVE-2022-31036argoproj · CVSS 4.3 · 0.9% likely

    Argoproj

22. Gogs has a Path Traversal in file editing UICVE-2024-54148gogs · CVSS 9.8 · 0.9% likely

    Gogs

23. container escape due to /dev/console mount and related racesCVE-2025-52565opencontainers · CVSS 8.4 · 0.8% likely

    Opencontainers

24. runc: LSM labels can be bypassed with malicious config using dummy procfs filesCVE-2025-52881opencontainers · CVSS 7.3 · 0.8% likely

    Opencontainers

25. readline.sh in socat before1.8.0.2 relies on the /tmp/$USER/stderr2 file.CVE-2024-54661dest-unreach · CVSS 9.8 · 0.8% likely
26. Path Traversal in AWS SAM CLI allows file copy to build containerCVE-2025-3047AWS · CVSS 6.5 · 0.8% likely

    AWS

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.