CVE-2025-53881None▾ SunlitA UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group to root.This issue affects Tumbleweed: from ? before 4.98.2-lp156.248.1.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 2.8 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
A UNIX Symbolic Link (Symlink) Following vulnerability in logrotate config in the exim package allowed privilege escalation from mail user/group to root.This issue affects Tumbleweed: from ? before 4.98.2-lp156.248.1.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-108981Low· 3.6ngx_cache_purge before 3.0.4 can allow file deletion via a symlink attack in certain situations where nginx and a served application (e.g., WordPress) run under the same user account
CVE-2025-59825Noneastral-tokio-tar is a tar archive reading/writing library for async Rust
CVE-2026-107810High· 8.1Nginx UI is a web user interface for the Nginx web server
CVE-2025-59829Medium· 6.5Claude Code is an agentic coding tool
CVE-2025-11489Medium· 4.5A security vulnerability has been detected in wonderwhy-er DesktopCommanderMCP up to 0.2.13
CVE-2025-52881High· 7.5runc is a CLI tool for spawning and running containers according to the OCI specification