CVE Field Guide
About Us
CVE-2026-68491
PUBLISHED
Assigner:
hackerone
Reserved:
30.07.2026
Published:
15.09.2026
Updated:
16.09.2026
An insufficient check allowed for the overwrite of arbitrary files via a symlink.
Metrics
CVSS 4.0
CVSS Vector:
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CVSS Score:
9.4
CVSS score
9.4
Exploitability Metrics
Vulnerable System Impact Metrics
Subsequent System Impact Metrics
Attack Vector
Network
Confidentiality
High
Confidentiality
High
Attack Complexity
Low
Integrity
High
Integrity
High
Attack Requirements
None
Availability
High
Availability
High
Privileges Required
Low
User Interaction
None
CVSS 4.0
Product Status
Vendor
Webpros
Product
SolusVM
Versions
Default:
unaffected
affected from 0 to 1.30.15 (excl.)
Credits
RackNerd
finder
References
https://docs.solusvm.com/en/solusvm1/release-notes/stable-branch/v1.30/#13015
https://docs.solusvm.com/en/solusvm1/release-notes/mainline-branch/v1.30/#13015
https://support.solusvm.com/hc/en-us/articles/43503583489687-CVE-2026-68491-Vulnerability-in-SolusVM-1-allows-Guest-to-Host-privilege-escalation
Problem Types
CWE-59 Improper Link Resolution Before File Access ('Link Following')
CWE