CWE-61 类弱点 146 条 CVE 漏洞汇总，含 AI 中文分析。
CWE-61 属于路径遍历类漏洞，指程序在处理文件路径时未充分验证符号链接的目标位置。攻击者通常通过构造指向系统敏感文件的恶意符号链接，诱导程序读取或修改非预期控制域内的文件，从而获取敏感数据或提升权限。开发者应避免直接信任用户输入的路径，在访问文件前严格校验符号链接指向，确保其位于预期的安全目录范围内，或禁用符号链接解析以消除风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-115424 | oc 镜像提取硬链接/符号链接验证绕过漏洞 — Red Hat OpenShift Container Platform 4 | 5.5 | Medium | 2026-10-22 |
| CVE-2026-115392 | Wasmtime 多版本通过尾斜杠沙箱逃逸漏洞 — wasmtime | 7.9 | High | 2026-10-22 |
| CVE-2026-102740 | AsyncHttpClient 可恢复下载索引存储漏洞 — async-http-client | 5.8 | Medium | 2026-10-15 |
| CVE-2026-50612 | QuMagie 软链接跟随远程代码执行漏洞 — QuMagie | 9.4 | Critical | 2026-10-15 |
| CVE-2026-41541 | qsyncsrv.cgi 符号链接创建漏洞 — Qsync Central | 5.3 | Medium | 2026-10-15 |
| CVE-2026-108981 | ngx_cache_purge模块符号链接攻击导致文件删除漏洞 — ngx_cache_purge | 3.6 | Low | 2026-10-12 |
| CVE-2026-106566 | ImageMagick delegate链接清理中因缺少检查导致策略绕过漏洞 — ImageMagick | 4.0 | Medium | 2026-10-07 |
| CVE-2026-107174 | Source-to-Image 绝对符号链接提取越权漏洞 — OpenShift Serverless | 6.4 | Medium | 2026-10-07 |
| CVE-2026-105712 | GnuPG <2.5.19 gpgtar文件覆盖漏洞 — GnuPG | 3.6 | Low | 2026-10-05 |
| CVE-2026-97024 | Flatpak 通过部署目录路径遍历在根上下文中任意写入漏洞 — Red Hat Enterprise Linux 10 | 7.1 | High | 2026-09-29 |
| CVE-2026-97023 | Flatpak：通过路径遍历实现任意文件删除 — Red Hat Enterprise Linux 10 | 7.1 | High | 2026-09-28 |
| CVE-2026-96808 | Flatpak 1.18.1前符号链接遍历致本地提权 — Flatpak | 7.4 | High | 2026-09-23 |
| CVE-2026-96807 | Flatpak 1.18.1前ld.so符号链接致任意文件写入 — Flatpak | 4.0 | Medium | 2026-09-23 |
| CVE-2026-91202 | Cockpit-files 特权粘贴符号链接致文件属主变更漏洞 — Red Hat Enterprise Linux 9 | 6.1 | Medium | 2026-09-18 |
| CVE-2026-91099 | HPLIP软件多漏洞 — HP Linux Imaging and Printing Software (HPLIP) | 5.1 | Medium | 2026-09-16 |
| CVE-2026-90616 | Flatpak 后置链接漏洞 — Flatpak | 7.4 | High | 2026-09-12 |
| CVE-2026-77159 | libvirt 后置链接漏洞 — Red Hat Enterprise Linux 10 | 5.5 | Medium | 2026-09-11 |
| CVE-2026-57825 | OCaml opam 后置链接漏洞 — opam | 5.7 | Medium | 2026-09-09 |
| CVE-2026-79939 | Dell Power Protect Cyber Recovery 后置链接漏洞 — Power Protect Cyber Recovery | 5.8 | Medium | 2026-08-26 |
| CVE-2026-75038 | Ilya Zlobintsev Linux GPU Control Application 后置链接漏洞 — LACT | 6.1 | Medium | 2026-08-25 |
| CVE-2026-64846 | Nix 竞争条件问题漏洞 — nix | 2.8 | Low | 2026-08-20 |
| CVE-2026-32657 | Dell AppSync 后置链接漏洞 — AppSync | 7.3 | High | 2026-08-18 |
| CVE-2026-47766 | Containers crun 后置链接漏洞 — crun | 5.1 | Medium | 2026-08-14 |
| CVE-2026-53802 | RsyncProject Rsync 后置链接漏洞 — rsync | 7.1 | High | 2026-08-13 |
| CVE-2026-47763 | PDM 后置链接漏洞 — pdm | 6.8 | Medium | 2026-08-04 |
| CVE-2026-54574 | Termux PRoot-Distro 后置链接漏洞 — proot-distro | 8.2 | High | 2026-07-29 |
| CVE-2026-56748 | Cribl Stream 后置链接漏洞 — Cribl Stream | 8.8 | High | 2026-07-27 |
| CVE-2026-17459 | perwendel Spark 后置链接漏洞 — spark | 4.3 | Medium | 2026-07-26 |
| CVE-2026-65010 | Hugging Face Datasets 后置链接漏洞 — datasets | 6.6 | Medium | 2026-07-23 |
| CVE-2026-12080 | QEMU 后置链接漏洞 — Red Hat Enterprise Linux 9 | 7.3 | High | 2026-07-20 |
CWE-61 是常见的弱点类别，本平台收录该类弱点关联的 146 条 CVE 漏洞。