CVE-2026-75118: Stack-based Buffer Overflow

A pre-authentication stack-based buffer overflow vulnerability exists in the httpgdprdecrypt function of TL-MR100 V3.20 due to insufficient bounds checking of encrypted requests to the /cgi/login endpoint. An adjacent unauthenticated attacker with access to the router's web management interface c...

CVE-2026-19286: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to execute arbitrary code due to improper enforcement of security restrictions on the A2A public endpoint...

CVE-2026-19318: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-18393: Out-of-bounds Write

A flaw was found in FFmpeg. The tdscloadcursor function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by supplying a specially crafted video file, potentially leading to a denial of service or arbitrary code...

CVE-2026-18729: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote authenticated attacker to execute arbitrary code due to improper control of generation of code...

The vulnerability of Adminer’s database management software lies in its improper external handling of file names or paths, allowing attackers to execute arbitrary code.

The vulnerability of Adminer’s database management software lies in improper external manipulation of file names or file paths. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to writing beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the software platform for conducting marketing campaigns in Adobe Campaign Classic lies in the insufficient validation of incoming requests, allowing a hacker to execute arbitrary code.

The vulnerability of the software platform for conducting marketing campaigns in Adobe Campaign Classic is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the inclusion of functions from an unreliable and uncontrolled area, allows a perpetrator to execute arbitrary code.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the 3D model texturing program Adobe Substance 3D Painter, related to the use of an unreliable search path, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the use of an unreliable search path. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the AdminerFileUpload plugin in the plugins/file-upload.php module of the Adminer database management system allows a hacker to execute arbitrary code.

The vulnerability of the AdminerFileUpload plugin in the plugins/file-upload.php software for managing databases in Adminer relates to the unlimited uploading of dangerous types of files. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2026-37710

Cross Site Scripting vulnerability in Omeka S v.4.2.0 allows a remote attacker to execute arbitrary code via the site navigation custom URL function...

CVE-2026-78032: Deserialization of Untrusted Data

SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege...

PT-2026-83282

Name of the Vulnerable Software and Affected Versions amazon-ssm-agent versions prior to 3.3.4515.0 Description Improper limitation of a pathname to a restricted directory in the aws:downloadContent plugin allows an authenticated remote user with ssm:SendCommand permissions restricted to the...

PT-2026-83244

Yamcs is a mission control framework. Prior to 5.12.8 and 5.13.2, Yamcs allows a user with SystemPrivilege.ControlArchiving to create a double-quoted StreamSQL column name that is interpolated into generated Java source by Expression.fillCode InputDefVars and Expression.sanitizeName. A sum...

CVE-2026-42007: Use After Free

An attacker that has valid credentials can use a Sieve script with the editheader extension to trigger a use-after-free in the mail editing code, and to write memory contents beyond the intended buffer into the delivered mail. This causes memory leak and opportunity to do memory corruption during...

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter, related to writing beyond buffer boundaries in memory, allows a hacker to execute arbitrary code.

The vulnerability of the 3D model texturing software Adobe Substance 3D Painter lies in the writing of code beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2026-19315: Out-of-bounds Read

A type confusion vulnerability in the iked process of WatchGuard Fireware OS allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-19313: Heap-based Buffer Overflow

An heap overflow vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to execute arbitrary code by sending specially crafted network traffic...

CVE-2026-13086: Stack-based Buffer Overflow

A stack-based buffer overflow in the epm Endpoint Protection Manager service used by the deprecated Mobile Security feature in WatchGuard Fireware OS allows an unauthenticated remote attacker to execute arbitrary code...