CVE-2026-114462

UNKNOWN 0.0

Arbitrary File Read via Symlink in Velneo vServer HTTP Server

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServer: from 32.3 before 36.6 and from 37.1 before 37.2.

CWE	CWE-59
Vendor	velneo
Product	vserver
Published	Oct 21, 2026

Stay Ahead of the Next One

Get instant alerts for velneo vserver

Be the first to know when new unknown vulnerabilities affecting velneo vserver are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Velneo / vServer

36.0 < 36.6 37.0 < 37.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗

velneo.es: https://velneo.es/avisos-de-seguridad/

Credits

Luis Sobrecueva