CWE-1386

Records the NVD classes under CWE-1386, highest CVSS first.

1. CRITICAL 9.8CVE-2026-568572026-10-08

   On Windows, when the target of Root.Mkdir or Root.MkdirAll is a junction pointing to an empty location, the operation can create a directory at the junction target even when that target is located outside the root. This only applies to operations where the las…

   AI risk analysis on Exploit-DB.ai →

2. UNSCOREDCVE-2025-643942026-10-27

   A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service.

   AI risk analysis on Exploit-DB.ai →

3. UNSCOREDCVE-2025-643912026-10-07

   This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it.

   AI risk analysis on Exploit-DB.ai →