EUVD-2026-68895

A vulnerability was detected in Dokploy up to 0.29.7. This issue affects the function writeTraefikConfigInPath of the file packages/server/src/utils/traefik/application.ts of the component Settings. The manipulation of the argument path results in path traversal. The attack can be launched...

PT-2026-84285

Name of the Vulnerable Software and Affected Versions Cleo Harmony versions prior to 5.8.1.11 Description An issue exists in the SAML Authentication component where manipulation of the Email argument within the LocalUserUtil.getNativeUserByAssertions function allows for improper authentication...

PT-2026-84496

Vulnerabilities have been identified in the operating system of AOS-CX switches that could potentially allow an unauthenticated remote actor to circumvent existing authentication controls. Successful exploitation could compromise system integrity and further expose sensitive information...

CVE-2026-76658: Improper Authentication

A vulnerability has been identified in the SSH daemon of HPE Networking Fabric Composer that could allow an unauthenticated remote attacker to gain administrative access to vulnerable AFC hosts. Successful exploitation could allow an attacker to execute arbitrary commands as a privileged user on...

PT-2026-84253

Name of the Vulnerable Software and Affected Versions Releasit Releasit COD Form & Upsells version 1 Description An issue exists in the OTP Validation component where server-side security is enforced on the client-side. This allows a remote attacker to manipulate the validation process...

PT-2026-84364

Name of the Vulnerable Software and Affected Versions fast-note-sync-service versions prior to 2.13.8 Description A remote attacker can escalate privileges because the admin configuration endpoint exposes the authTokenKey variable. Recommendations Update fast-note-sync-service to version 2.13.8 o...

PT-2026-84298

A vulnerability was determined in Xinhu Rainrock RockOA up to 2.3.2. The impacted element is the function toaddval of the file /index.php?m=index&a=publicsavevalue&ajaxbool=true. Executing a manipulation of the argument Value can lead to sql injection. The attack may be performed from remote. The...

CVE-2026-52111

An issue in fast-note-sync-service =2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes authTokenKey...

ROS-20260901-73-0046

The vulnerability in Netty is related to incorrect handling of exceptional states. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260901-73-0047

The vulnerability in Netty is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

ROS-20260901-73-0049

The vulnerability in Netty is related to the incorrect checking of the specified data type for input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

CVE-2026-73715: Uncontrolled Resource Consumption

A vulnerability in the API of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to conduct a denial of service attack. Successful exploitation could allow an attacker to disrupt the availability of the affected interface...

PT-2026-84477

Name of the Vulnerable Software and Affected Versions AOS-CX affected versions not specified Description An unauthenticated remote actor can cause a denial-of-service condition by sending specially crafted packets, leading to the disruption of normal operations on the device. Recommendations At t...

PT-2026-84514

Name of the Vulnerable Software and Affected Versions hermes-agent version 0.18.0 Description A flaw in the Session Chat Interface component, specifically within the gateway/platforms/api server.py file, allows a remote attacker to cause a denial of service. Recommendations At the moment, there i...

CVE-2026-84288: Improper Resource Shutdown or Release

A vulnerability has been found in NousResearch hermes-agent up to 0.18.2. This affects the function HermesACPAgent.prompt of the file acpadapter/session.py of the component ACP Prompt Workflow. Such manipulation leads to denial of service. The attack may be performed from remote. The exploit has...

PT-2026-84163

A security flaw has been discovered in zhongyu09 OpenChatBI up to 0.3.0. Affected by this vulnerability is the function validate sql safety of the file openchatbi/text2sql/generate sql.py. Performing a manipulation results in sql injection. The attack can be initiated remotely. Versions v0.2.0...

CVE-2026-84289: Memory Allocation with Excessive Size Value

A vulnerability was found in NousResearch hermes-agent up to 0.18.2. This vulnerability affects the function listtools of the file tools/mcptool.py of the component MCP Tool. Performing a manipulation results in uncontrolled memory allocation. It is possible to initiate the attack remotely. The...

CVE-2026-84287: Improper Resource Shutdown or Release

A flaw has been found in NousResearch hermes-agent 0.18.0. Affected by this issue is some unknown functionality of the file gateway/platforms/apiserver.py of the component Session Chat Interface. This manipulation causes denial of service. The attack is possible to be carried out remotely. The...

CVE-2026-73775: Exposure of Sensitive Information to an Unauthorized Actor

Vulnerabilities in the API endpoint of AOS-CX could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by...

CVE-2026-73759: Uncontrolled Resource Consumption

Vulnerabilities in AOS-CX could allow an unauthenticated remote malicious actor to trigger a denial-of-service condition by sending specially crafted packets. Successful exploitation of these vulnerabilities results in disruption of normal operation on affected devices...