Vulnerabilities
VEX
CWE
ATT&CK
KEV Catalogs
All catalogs
Catalogue scorecard
YOURORG
Community
Sightings
Comments
Bundles
Organizations
Contributors
Statistics
Log in
About
Search term
Success
← All credits
Upstream acknowledges Zhuorao Yang (Huawei Cloud) as the original reporter.
2 vulnerability records and advisories credit this contributor.
CVE-2026-78410
Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection
CVE-2026-78409
Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks