Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-110234 1 Elio-fm 1 Elio 2026-10-19 4.4 Medium
Elio through 1.13.0 contains an insecure temporary file vulnerability that allows local users to overwrite another user's files by pre-creating symbolic links at predictable capture paths. Attackers who know the victim's Elio process ID can plant a symlink so previewing media, fonts or archives truncates and overwrites victim-owned files.