Loading vulnerability…
CVE-2026-35365 affects the mv utility in uutils coreutils when moving directory trees across filesystem boundaries, where mv falls back to copy-and-remove behavior. In this path, symbolic links inside the moved tree are handled incorrectly: instead of preserving the symlink as a symlink at the destination, the implementation dereferences it and copies the linked target as a real file or directory. As a result, symlinks pointing outside the intended tree can cause unrelated external content to be copied into the destination. If symlinks reference large directory trees, the operation can consume excessive disk space and time; if symlink loops are present, the behavior can recurse repeatedly or indefinitely. The issue is described as fixed in uu_mv 0.7.0 and commit 9654e4ab.
Mallory correlates every CVE against your assets, your vendors, and active adversary campaigns. Know which vulnerabilities matter for you, not just which ones are loud.
What it means. What to do now. Patch path, mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
If you can’t patch tonight, do this now.
Patch, then assume compromise.
No public exploits tracked yet. Mallory keeps watching.
No public exploit code observed for this vulnerability.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
Vendor-confirmed product mapping. Mallory continuously reconciles this list against your asset inventory.
1 sources tracked across advisories and community write-ups. News coverage will land here when it surfaces.
No news coverage yet. Advisories and community discussion only.
Query your assets running an affected version, and investigate the blast radius.
Every observed campaign linking this CVE to a named adversary.
Malware families riding this exploit, with evidence and IOCs.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Cross-references every affected SKU, including bundled OEM variants.
Community discussion across Reddit, Mastodon, and other social sources.