Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.5%	CVE-2026-17459spark · Symlink Following Medium5.3EPSS 0.5%2026-07-26CVE Database V5CVE-2026-17459 CVE-2026-17459 is a medium severity vulnerability in perwendel spark up to version 2.9.4. It involves the staticFiles.externalLocation function in the ExternalResourceHandler.java file, which can be manipulated to follow symbolic links. This vulnerability can be exploited remotely and has been publicly disclosed. No official patch or remediation has been announced by the vendor as of the publication date. EPSS 0.5%Vulnerability perwendel	CVE Database V5	2026-07-26

Showing 1–1 of 1 result