Vulnerability Bulletins |
CVE-2026-18348 |
|
| Affected software | ORACLE |
| Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NETWORK ACL permission boundary. This enables internal network reconnaissance via port oracle and potential data exfiltration to external endpoints. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-18348 | |