CVE-2026-6851Disclosure(bitdefender / internet_security)

LOWCVSS 7.0 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by leveraging a race conditions via Symbolic Links. This issue affects Total Security: before 27.0.58.315; Internet Security: before 27.0.58.315.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-59

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • internet_security
  • total_security
  • windows

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • Peaked 1d ago at 2 mentions (2026-07-14); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Products
internet_securitytotal_securitywindows

1 version affected across 3 products

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-07-14: 2Mentions · 2026-07-16: 1Technical Details · 2026-07-14: 207-1407-16
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-07-142
Disclosure2
2026-07-161
Disclosure1
Full discourse3 posts
  • CERT-PY@CERTpy
    Disclosure

    ⚠️ Vulnerabilidad en productos Bitdefender ❗ CVE-2026-6851 ➡️ Más info: https://www.cert.gov.py/vulnerabilidad-en-productos-bitdefender/ https://t.co/RqbBp3uy6v

    Post summary

    A new vulnerability, CVE-2026-6851, affecting Bitdefender products has been disclosed and further information can be accessed via the provided links.

    00000246
    6.7K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-6851 An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security … https://www.cve.org/CVERecord?id=CVE-2026-6851 ----- Traducción: CVE-2026-6851 Una… http://infoflow.cloud`

    Post summary

    The tweet merely announces CVE‑2026‑6851, giving a brief technical description of an improper link resolution flaw in Bitdefender’s File Shredder module and linking to the official CVE record.

    0000031
    92 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-6851 An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security … https://www.cve.org/CVERecord?id=CVE-2026-6851

    Post summary

    This notice references a newly disclosed CVE‑2026‑6851, describing an improper link resolution vulnerability in Bitdefender’s File Shredder module, but no exploitation, PoC, or patch information is provided.

    00000472
    57.8K followersView on X
CPE platform detail3 entries

3 of 3 entries

PartVendorProductVersionTarget SWTarget HW
Appbitdefenderinternet_security---
Appbitdefendertotal_security---
OSmicrosoftwindows---

Explore more