vServer vulnerabilities
CVEs whose affected-version data names the vServer package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-114462Medium· 6.0Arbitrary File Read via Symlink in Velneo vServer HTTP Server
Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServer: from 32.3 before 36.6 and from 37.1 before 37.2.
▾ SunlitVelneo · vServervia CVEORG
CVE-2026-114405High· 8.7Denial of Service via Malformed VATP Packet in Velneo vServer
Improper validation of array index vulnerability in Velneo vServer. This issue affects vServer: from 36.0 before 36.6 and from 37.0 before 37.2.
▾ TwilightVelneo · vServervia CVEORG