CVE-2026-81826: Insufficient Session Expiration

Affected versions of Flowintel do not revoke existing authenticated sessions when a user’s password is changed. This means that if an attacker already possesses a valid session—for example, from prior access or a stolen session token—the victim changing their password does not terminate that...

CVE-2025-62342: Insufficient Session Expiration

HCL IntelliOps Event Management IEM is affected by a Session Deletion Vulnerability. It may allow improper handling of user sessions, resulting in sessions not being fully terminated after logout or deletion...

CVE-2026-81731: Improper Neutralization of Input During Web Page Generation

Frappe 15.11.0 through 16.32.0 stores and renders the workspace card description without XSS filtering. The description field of the Workspace Link doctype is declared with "ignorexssfilter": 1 in frappe/desk/doctype/workspacelink/workspacelink.json, and sanitizecontent in...

CVE-2026-26456: Concurrent Execution using Shared Resource with Improper Synchronization

A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes withou...

PT-2026-82504

Name of the Vulnerable Software and Affected Versions HCL IntelliOps Event Management IEM affected versions not specified Description Improper handling of user sessions may prevent sessions from being fully terminated after a logout or deletion process occurs. Recommendations At the moment, there...

CVE-2026-26456

A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 . The root cause is a race condition occurring between the request dispatch thread and the session cleanup thread when they access shared session list node...

CVE-2026-30047

The Open5GS v2.7.6 software contains a reachable assertion vulnerability within the /nsmf-pdusession/v1/sm-contexts component. This flaw allows an attacker to trigger a Denial of Service (DoS) condition by submitting a specially crafted DELETE request . No specific remediation instructions, explo...

CVE-2026-26456

A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes withou...

PT-2026-82842

A stored cross-site scripting XSS vulnerability in WatchGuard Dimension's task scheduling feature allows a low-privileged authenticated administrator to inject arbitrary HTML/JavaScript into these fields, which then executes in the browser session of any other user...

PT-2026-82844

Name of the Vulnerable Software and Affected Versions WatchGuard Dimension affected versions not specified Description WatchGuard Dimension records unredacted session identifiers for logged-in users within its web UI diagnostic log. A low-privileged Dimension Administrator can retrieve this log t...

PT-2026-82796

Name of the Vulnerable Software and Affected Versions cpp-httplib versions 0.33.0 through 0.50.0 Description The TLS-enabled WebSocket client contains a use-after-free flaw. In the shutdown and close function, the SSL object is freed and its pointer is cleared; however, the subsequent WebSocket...

CVE-2026-30047

A reachable assertion vulnerability in the /nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 allows attackers to cause a Denial of Service DoS via supplying a crafted DELETE request...

CVE-2025-62343: Undefined Security Weakness

HCL IntelliOps Event Management IEM is affected by an Admin Session Concurrency Vulnerability. it may allows user sessions to remain active after logout or session deletion...

CVE-2026-47665

Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comments, whose content is stored as raw text and rendered into the page with innerHTML without any sanitization. Because the backend...

CVE-2026-47665

Penpot , an open-source design and prototyping platform, is affected by a stored cross-site scripting vulnerability in versions up to and including 2.14.3 . Comment content on shared files is stored as raw text and rendered via innerHTML without sanitization; the backend applies only a length che...

CVE-2026-47665 Penpot: Stored XSS via comment content, innerHTML renders unsanitized HTML

Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comments, whose content is stored as raw text and rendered into the page with innerHTML without any sanitization. Because the backend...

EUVD-2026-66812

Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comments, whose content is stored as raw text and rendered into the page with innerHTML without any sanitization. Because the backend...

CVE-2026-47665 Penpot: Stored XSS via comment content, innerHTML renders unsanitized HTML

Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comments, whose content is stored as raw text and rendered into the page with innerHTML without any sanitization. Because the backend...

CVE-2026-47665

Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comments, whose content is stored as raw text and rendered into the page with innerHTML without any sanitization. Because the backend...

CVE-2026-47665 Penpot: Stored XSS via comment content, innerHTML renders unsanitized HTML

Penpot is an open-source design and prototyping platform. In versions up to and including 2.14.3, Penpot is vulnerable to stored cross-site scripting through file comments, whose content is stored as raw text and rendered into the page with innerHTML without any sanitization. Because the backend...