CVE-2026-77248

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, the streamable HTTP transport accepts requests without a user identity and falls back to operator credentials, while uploadattachment accepts an unrestricted filepath. An...

CVE-2026-76712

A vulnerability exists in the HPE Networking Analytics and Location Engine (ALE) that may allow an unauthenticated remote attacker to gain unauthorized access , cause information disclosure , or trigger a denial of service . The vulnerability can be exploited by sending specially crafted input or...

CVE-2026-91129 Home Assistant: mDNS Server-Side Request Forgery

Home Assistant is open source home automation software focused on local control and privacy. Prior to 2026.2.3, the IPP integration automatically processed unauthenticated ipp.tcp.local mDNS announcements in homeassistant/components/ipp/configflow.py, where asyncstepzeroconf passed...

CVE-2026-91129

The Home Assistant home automation software is vulnerable to a Server-Side Request Forgery (SSRF) flaw in the IPP integration (specifically within homeassistant/components/ipp/config_flow.py). Prior to version 2026.2.3 , the async_step_zeroconf function automatically processed unauthenticated _ip...

CVE-2026-95862

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

EUVD-2026-84762

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

EUVD-2026-84760

A malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

CVE-2026-95861

Certain UniFi gateway devices are vulnerable to an Uncontrolled Recursion vulnerability. A malicious actor with network access can exploit this flaw to perform a Denial of Service (DoS) attack against the device. No specific software versions, root cause files, or remediation steps are provided i...

CVE-2026-77558

A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

CVE-2026-77558

A network-based Out-of-bounds Read vulnerability exists in certain UniFi gateway devices . An attacker with network access can exploit this flaw to perform a Denial of Service (DoS) attack on the affected device. The vulnerability is assigned a High severity score of 7.5. No specific remediation ...

CVE-2026-77556

A malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

CVE-2026-77556

An Out-of-bounds Read vulnerability exists in certain UniFi gateway devices , which could be exploited by a malicious actor with network access. The vulnerability allows for a Denial of Service (DoS) attack against the device. No specific affected versions, root causes, or remediation details are...

CVE-2026-77555

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

CVE-2026-77555

An Out-of-bounds Write vulnerability exists in certain UniFi gateway devices , potentially accessible to a malicious actor via the network. Exploitation of this vulnerability can lead to a Denial of Service (DoS) attack on the affected device. The documents do not provide specific software versio...

EUVD-2026-84754

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

EUVD-2026-84753

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

CVE-2026-77544

A malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service DoS attack on the device...

CVE-2026-77544

Certain UniFi gateway devices are susceptible to an Out-of-bounds Write vulnerability. A malicious actor with network access can exploit this flaw to perform a Denial of Service (DoS) attack against the device. The vulnerability carries a CVSS 3.1 base score of 7.5 (High). No specific software ve...

CVE-2024-38063

CVE-2024-38063 Windows Vulnerability that allows the implementation of unauthorised activity over the network: remote execution of Windows TCP/IP remote code. Two virtual machines - a victim and an attacker - are ready to simulate the attack. On the victim machine, a tool for capturing network...

CVE-2026-77274

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, validateurlforssrf has a backslash authority confusion because it interprets the authority differently from the Requests connection layer in the header-based Jira and Confluence URL...