CVE-2026-56815: Rasta-Mouse Pwnlift

High severity, CVSS 7.4. EPSS: 0.2% chance of exploitation in the next 30 days.

pwnlift before d7a9544, in a privileged deployment, contains a symlink following vulnerability in the upload handler in Components/Pages/Home.razor.

Affected products

• Rasta-Mouse Pwnlift

Published 2026-06-23. Last modified 2026-07-02.