CVE-2026-106713: An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…

An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the com.dramawave.feature.web.WebPageActivity component...

CVE-2026-122324: oss-apps SplitPro: SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to read other…

SplitPro through 2.1.6 contains an authorization bypass vulnerability that allows authenticated users to read other users' expenses by supplying arbitrary expenseId values to expense.getExpenseDetails. Attackers who obtain an expense UUID, such as removed former participants, can retrieve expense...

CVE-2026-116790: signalwire freeswitch: FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to…

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, FreeSWITCH's inbound ICE handling accepted every connectivity check without cryptographically...

CVE-2026-116785: signalwire freeswitch: FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to…

FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementation that runs on any commodity hardware. Prior to 1.11.2, wsreadframe decoded a WebSocket frame's 64-bit extended payload length with a 32-bit byte swap an...

CVE-2026-119344: ultravioletrs cocos: Cocos AI is a confidential computing system for AI

Cocos AI is a confidential computing system for AI. In version 0.8.2 and earlier, Cocos AI accepts trusted execution environment attestation Evidence when firmware patch levels and software measurements match, without binding the Evidence to an allowed platform owner or unique machine identity an...

CVE-2026-123208: libnoname noname: noname Electron desktop build v1.11.2 through v1.11.6.1 contains an unauthenticated local file server with wildcard…

noname Electron desktop build v1.11.2 through v1.11.6.1 contains an unauthenticated local file server with wildcard CORS that allows malicious websites to read, overwrite, or delete installation files. Attackers can send cross-origin requests to /writeFile on localhost port 8089 to overwrite...

CVE-2026-111493: TPC Software Matchpoint: Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint, which allows profile photos to be…

Lack of authentication and authorization in the Images.ashx endpoint in MatchPoint, which allows profile photos to be downloaded using predictable identifiers. An unauthenticated remote attacker could enumerate these identifiers and collect users' photos. Linking these photos to identities may be...

CVE-2026-69143: Rejected reason: This CVE is a duplicate of another CVE.

Rejected reason: This CVE is a duplicate of another CVE...

CVE-2026-123205: accel-ppp: accel-ppp before 1.15.0 contains a heap buffer overflow vulnerability in the tcp, syslog and pgsql log targets that…

accel-ppp before 1.15.0 contains a heap buffer overflow vulnerability in the tcp, syslog and pgsql log targets that allows unauthenticated remote peers to overflow fixed heap buffers by producing log lines exceeding LOGMAXSIZE. Attackers within client-ip-range can send an L2TP...

CVE-2026-123135: langgenius dify: A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2

A vulnerability was found in langgenius dify up to 1.18.0/2.0.0-beta.2. Affected by this vulnerability is an unknown functionality of the file api/configs/feature/init.py of the component Sandbox Run Handler. The manipulation results in hard-coded credentials. The attack can be launched remotely...

CVE-2026-122267: Chainguard MinIO: MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz-* headers, letting a…

MinIO Signature V4 verification before RELEASE.2026-09-22T19-25-18Z accepts unsigned x-amz- headers, letting a presigned PUT URL be escalated into a cross-bucket read...

CVE-2026-122323: kyverno: Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSignatureBlob that allows…

Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSignatureBlob that allows attackers to exhaust memory by supplying highly compressed notary signature layers. Attackers who control registry referrers or signatures can publish small gzip layers that...

CVE-2026-90963: Unknown Essential Real Estate: The Essential Real Estate WordPress plugin before 5.3.5 does not perform any authorization or publication-status check…

The Essential Real Estate WordPress plugin before 5.3.5 does not perform any authorization or publication-status check in one of its AJAX actions, allowing unauthenticated users to read the full contents of property listings that have not been published, together with the private name, email...

CVE-2026-86442: Unknown WP Event Manager: The WP Event Manager WordPress plugin before 3.4.2 does not verify the ownership or the post type of a user supplied…

The WP Event Manager WordPress plugin before 3.4.2 does not verify the ownership or the post type of a user supplied post identifier in its front-end event submission flow, allowing unauthenticated attackers to read and overwrite the content of arbitrary unpublished posts and pages, and to conver...

CVE-2026-122992: G4KLX DStarGateway: In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer…

In G4KLX DStarGateway and F4FXL DStarGateway before 7b75de6, dstarCallsignToAPRS in APRSUtils.cpp has an integer underflow via an empty RS-MS1A sender field...

CVE-2026-69066: Samsung Semiconductor: Memory corruption in GPU driver due to improper validation of VMID reservation.

Memory corruption in GPU driver due to improper validation of VMID reservation...

CVE-2026-33969: Samsung Semiconductor: In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop,…

In the NAS Authentication Request message decoding procedure, a missing lower bound check causes an infinite loop, leading to Denial of Service...

CVE-2026-90967: Unknown Essential Real Estate: The Essential Real Estate WordPress plugin before 5.3.5 does not verify ownership of an invoice before rendering it in…

The Essential Real Estate WordPress plugin before 5.3.5 does not verify ownership of an invoice before rendering it in one of its AJAX actions, allowing an authenticated low-privileged user to read other users' invoices, including the invoice owner's name, account email address and financial...

CVE-2026-118869: SHIRASAGI Project SHIRASAGI: An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute…

An OS command injection vulnerability exists in SHIRASAGI, which may allow an authenticated attacker to execute arbitrary OS commands on the system running the product...

CVE-2026-94395: Thalesgroup Safenet Authentication Client SIS token engine: A stack-based buffer overflow in Thales SafeNet Authentication Client (SAC) SIS token engine processing can be…

A stack-based buffer overflow in Thales SafeNet Authentication Client SAC SIS token engine processing can be triggered by a malicious physical or software-emulated smart card. The issue can occur before authentication or PIN entry and may cause a denial of service or potentially arbitrary code...