Improper Link Resolution Vulnerability in Velneo vServer
CVE-2026-114462

6MEDIUM

Key Information:

Vendor

Velneo

Status
Vserver
Vendor
CVE Published:
21 October 2026

What is CVE-2026-114462?

An improper link resolution vulnerability in Velneo vServer can be exploited during file access processes, potentially leading to unauthorized access and exposure of critical data. This issue affects versions from 32.3 to 36.6 and includes specific vulnerabilities in versions 37.1 and 37.2. Users should review their configurations and apply the necessary patches as outlined in the vendor's security advisories.

Affected Version(s)

vServer 36.0 < 36.6

vServer 37.0 < 37.2

vServer 36.6

References

https://velneo.es/avisos-de-seguridad/
vendor-advisorypatch

CVSS V4

Score:
6
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Luis Sobrecueva
.