CVE-2026-111490: TPC Software Matchpoint: Insecure direct object reference (IDOR) vulnerability in the MatchPoint API, which relies on the `actingasuser` HTTP…

Insecure direct object reference IDOR vulnerability in the MatchPoint API, which relies on the actingasuser HTTP header without verifying the requester's authorization for the specified user. Manipulation of sequential identifiers allows access to personal, banking, and financial data, private...

CVE-2026-111493: TPC Software Matchpoint: Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint, which allows profile photos to be…

Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint, which allows profile photos to be downloaded using predictable identifiers. An unauthenticated remote attacker could enumerate these identifiers and collect users' photos. Linking these photos to identities may be...

CVE-2026-69143: Rejected reason: This CVE is a duplicate of another CVE.

Rejected reason: This CVE is a duplicate of another CVE...

CVE-2026-123205: accel-ppp: accel-ppp before 1.15.0 contains a heap buffer overflow vulnerability in the tcp, syslog and pgsql log targets that…

accel-ppp before 1.15.0 contains a heap buffer overflow vulnerability in the tcp, syslog and pgsql log targets that allows unauthenticated remote peers to overflow fixed heap buffers by producing log lines exceeding LOGMAXSIZE. Attackers within client-ip-range can send an L2TP...

CVE-2026-58273: rucio: Rucio is a scientific data management framework

Rucio is a scientific data management framework. From 1.16.1 until 35.9.0, 38.6.0, and 41.0.0rc1, the /credentials/signurl endpoint reads X-Rucio-Account instead of the account stored in request.environ'issuer' by token authentication. Any authenticated low-privilege user can supply root as the...

CVE-2026-123135: langgenius dify: A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2

A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2. Affected by this vulnerability is an unknown functionality of the file api/configs/feature/init.py of the component Sandbox Run Handler. The manipulation results in hard-coded credentials. The attack can be launched remotely...

CVE-2026-122267: Chainguard MinIO: MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting a…

MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz- headers, letting a presigned PUT URL be escalated into a cross-bucket read...

CVE-2026-114134: psf black: Black is the uncompromising Python code formatter

Black is the uncompromising Python code formatter. Prior to 26.10.1, the Black GitHub Action with usepyproject: true accepts tool.black.required-version from pyproject.toml without validating that it is a released Black version specifier. An attacker who can submit a pull request can change that...

CVE-2026-122323: kyverno: Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSignatureBlob that allows…

Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSignatureBlob that allows attackers to exhaust memory by supplying highly compressed notary signature layers. Attackers who control registry referrers or signatures can publish small gzip layers that...

CVE-2026-90963: Unknown Essential Real Estate: The Essential Real Estate WordPress plugin before 5.3.5 does not perform any authorization or publication-status check…

The Essential Real Estate WordPress plugin before 5.3.5 does not perform any authorization or publication-status check in one of its AJAX actions, allowing unauthenticated users to read the full contents of property listings that have not been published, together with the private name, email...

CVE-2026-86442: Unknown WP Event Manager: The WP Event Manager WordPress plugin before 3.4.2 does not verify the ownership or the post type of a user supplied…

The WP Event Manager WordPress plugin before 3.4.2 does not verify the ownership or the post type of a user supplied post identifier in its front-end event submission flow, allowing unauthenticated attackers to read and overwrite the content of arbitrary unpublished posts and pages, and to conver...

CVE-2026-122992: G4KLX DStarGateway: In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer…

In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field...

CVE-2026-69066: Samsung Semiconductor: Memory corruption in GPU driver due to improper validation of VMID reservation.

Memory corruption in GPU driver due to improper validation of VMID reservation...

CVE-2026-33969: Samsung Semiconductor: In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop,…

In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service...

CVE-2026-90967: Unknown Essential Real Estate: The Essential Real Estate WordPress plugin before 5.3.5 does not verify ownership of an invoice before rendering it in…

The Essential Real Estate WordPress plugin before 5.3.5 does not verify ownership of an invoice before rendering it in one of its AJAX actions, allowing an authenticated low-privileged user to read other users' invoices, including the invoice owner's name, account email address and financial...

CVE-2026-118869: SHIRASAGI Project SHIRASAGI: An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute…

An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the system running the product...

CVE-2026-94395: Thalesgroup Safenet Authentication Client SIS token engine: A stack-based buffer overflow in Thales SafeNet Authentication Client (SAC) SIS token engine processing can be…

A stack-based buffer overflow in Thales SafeNet Authentication Client SAC SIS token engine processing can be triggered by a malicious physical or software-emulated smart card. The issue can occur before authentication or PIN entry and may cause a denial of service or potentially arbitrary code...

CVE-2026-76563: Fileorbis Informatics Services Trade Inc. Fileorbis: Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Fileorbis Informatics…

Improper neutralization of Script-Related HTML tags in a web page basic XSS vulnerability in Fileorbis Informatics Services Trade Inc. Fileorbis allows Using Malicious Files. This issue affects Fileorbis: before 12.5.4...

CVE-2026-112110: Thalesgroup Safenet Authentication Client Service: A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function…

A time-of-check to time-of-use race condition in the SafeNet Authentication Client SAC SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log directory. This issue affects SAC releases up to an...

CVE-2026-121139: Rapid7 Metasploit Framework: The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability whereby the REST API grants an…

The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability whereby the REST API grants an unauthenticated "bootstrap" exemption so that the very first administrator can be created when the users table is empty. While the table is empty, POST /api/v1/users is exempt from...