PT-2026-114890
CVE-2026-53882
·
Published
2026-10-15
·
Updated
2026-10-15
Description by
CVSS 4.0
8.7
HighMetricsAV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions
Virtualization Station versions prior to 4.1.1.130
Description
An improper link resolution before file access, also known as link following, allows a remote attacker with a user account to compromise system security. This issue occurs during the VM import process and involves path traversal, which is a technique used to access files and directories that are stored outside the intended folder.
Recommendations
Update to version 4.1.1.130 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾