Threats Tagged 'cve-2026-23986'
View all threats tagged with 'cve-2026-23986'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-23986'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2026-23986 is a medium-severity vulnerability in copier versions prior to 9.11.2 that allows a malicious project template to overwrite arbitrary files outside the intended destination directory by exploiting symbolic link following combined with the _preserve_symlinks: true setting. This occurs without requiring privileges or authentication but does require user interaction to generate a project from a crafted template. The vulnerability enables attackers to cause data corruption or disruption by overwriting files according to the user's write permissions. The issue is patched in version 9.11.2. European organizations using copier for project templating should update promptly to mitigate risk. The vulnerability primarily affects UNIX-like systems where symbolic links are supported and copier is used. Join the discussion | CVE Database V5 | 01/21/2026, 22:20:37 UTC Added: 01/21/2026, 22:35:56 UTC |
Showing 1 to 1 of 1 result