Threat database

CVE-2026-114462 is a medium severity vulnerability in Velneo vServer involving improper link resolution before file access, also known as 'link following'. It affects versions from 36.0 up to but not including 36.6, and from 37.0 up to but not including 37.2. The vulnerability could allow an attacker with low privileges and partial attack complexity to influence file access behavior. No known exploits are reported in the wild, and no official patch information is provided in the data.

An improper validation of array index vulnerability exists in Velneo vServer versions from 36.0 before 36.6 and from 37.0 before 37.2. This vulnerability could allow an attacker to cause unexpected behavior due to invalid array indexing. The issue is identified as CWE-129. No official patch or remediation details are provided in the available data.