CVE-2026-112110: Thalesgroup Safenet Authentication Client Service: A time-of-check to time-of-use race condition in the SafeNet Authentication Client (SAC) SACSrv log-cleanup function…

A time-of-check to time-of-use race condition in the SafeNet Authentication Client SAC SACSrv log-cleanup function can allow an authenticated, non-administrator local user to redirect a privileged file deletion operation outside the intended log directory. This issue affects SAC releases up to an...

CVE-2026-121139: Rapid7 Metasploit Framework: The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability whereby the REST API grants an…

The Rapid7 Metasploit msf-ws suffers from a missing authentication vulnerability whereby the REST API grants an unauthenticated "bootstrap" exemption so that the very first administrator can be created when the users table is empty. While the table is empty, POST /api/v1/users is exempt from...

CVE-2026-105321: Kobikom Telecommunications and Informatics Services Inc. Kobikom: Improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Kobikom…

Improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability in Kobikom Telecommunications and Informatics Services Inc. Kobikom allows SQL Injection. This issue affects Kobikom: before KobiPBX-FOP3-SEC-r1...

CVE-2026-76077: esa asn1scc: ASN1SCC is an open source ASN.1 compiler for embedded systems

ASN1SCC is an open source ASN.1 compiler for embedded systems. Prior to 4.7.0.1, the XER tokenizer NT in asn1crt/asn1crtencodingxer.c, which is reached by all XER decode paths, copies tag characters into a fixed char Value100 field without a length bound and reads input and lookahead bytes withou...

CVE-2026-118193: stellarwp GiveWP – Donation Plugin and Fundraising Platform: The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Privilege Escalation in all…

The GiveWP – Donation Plugin and Fundraising Platform plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 4.19.1 via the donordefaultuserrole parameter. This is due to the sanitizeoptiondonordefaultuserrole function applying only a narrow literal check...

CVE-2026-54144: tinyhumansai openhuman: OpenHuman is an open-source agent harness available as a desktop application and Rust library

OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.56.0 on macOS, the runtime injected into a supported remote account webview such as Google Meet allows page JavaScript to call getDisplayMedia without a live user gesture. Instead of rejecting...

CVE-2026-63218: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, the changeReportPage controller action renders a protected report without repeating the record-level access check enforced by DetailView. The affected flow begins at...

CVE-2026-100360: SuiteCRM: SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application

SuiteCRM is an open-source, enterprise-ready Customer Relationship Management CRM software application. Prior to 7.15.2 and 8.10.2, V8 API relationship write paths do not consistently enforce object-level edit and view authorization on both related records. In the verified Account-to-Contact case...

CVE-2026-122326: Chevereto: Chevereto before 4.5.8 contains an authorization bypass vulnerability in the get-album-contents action of the /json…

Chevereto before 4.5.8 contains an authorization bypass vulnerability in the get-album-contents action of the /json route that allows unauthenticated attackers to list private albums by supplying another user's album id. Attackers with a session token from any public page and an album's encoded i...

CVE-2026-123028: A vulnerability was identified in itsourcecode Online Book Store 1.0

A vulnerability was identified in itsourcecode Online Book Store 1.0. Affected by this issue is some unknown functionality of the file /adminedit.php. The manipulation of the argument bookisbn leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly availabl...

CVE-2026-119083: AWS gluonts: Path traversal in the archive extraction utility in GluonTS before 0.17.0 might allow an actor who supplies a crafted…

Path traversal in the archive extraction utility in GluonTS before 0.17.0 might allow an actor who supplies a crafted tar archive to write arbitrary files outside the intended extraction directory with the privileges of the extracting process via symbolic or hard links contained in the archive. T...

CVE-2026-122188: DeepGraphLearning KnowledgeGraphEmbedding: A flaw has been found in DeepGraphLearning KnowledgeGraphEmbedding up to 2e440e0f9c687314d5ff67ead68ce985dc446e3a

A flaw has been found in DeepGraphLearning KnowledgeGraphEmbedding up to 2e440e0f9c687314d5ff67ead68ce985dc446e3a. Impacted is the function overrideconfig of the file codes/run.py of the component Checkpoint Loading. This manipulation of the argument datapath causes path traversal. The attack can...

CVE-2026-123047: Eclipse Foundation Eclipse BaSyx Helm Charts: In Eclipse BaSyx Helm Charts versions 3.0.0-rc.1 to 3.12.1 of the `basyx` chart, deployments with the bundled Keycloak…

In Eclipse BaSyx Helm Charts versions 3.0.0-rc.1 to 3.12.1 of the basyx chart, deployments with the bundled Keycloak enabled store the passwords of the Keycloak users that the chart creates in cleartext in a Kubernetes ConfigMap. The template keycloak-init-config.yaml rendered...

CVE-2026-114232: Red Hat: A flaw was found in the UserManagedPermissionService of the Keycloak authorization server

A flaw was found in the UserManagedPermissionService of the Keycloak authorization server. The UMA Protection API, which manages user permissions, fails to validate the resourceType field when a user creates a new policy. This allows an attacker to create a policy that applies to resources owned ...

CVE-2026-115573: openemr: OpenEMR is a free and open source electronic health records and medical practice management application

OpenEMR is a free and open source electronic health records and medical practice management application. Prior to 8.3.0, library/classes/Controller.class.php allows explicit controller.php dispatch to controllers missing from CONTROLLERACLMAP, and checkControllerAcl returns without enforcing any...

CVE-2026-123024: agentscope-ai AgentScope: A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11

A vulnerability has been found in agentscope-ai AgentScope up to 2.0.11. This impacts the function getcurrentuserid of the file src/agentscope/app/deps.py of the component Agent Service. Such manipulation of the argument X-User-ID leads to missing authentication. The attack can be executed...

CVE-2026-114235: Apache Software Foundation Apache OFBiz: Direct Request ('Forced Browsing') in the Order component in Apache OFBiz 24.09 before 24.09.08 on all platforms allows…

Direct Request 'Forced Browsing' in the Order component in Apache OFBiz 24.09 before 24.09.08 on all platforms allows an authenticated user with only view access to the Order Manager to modify the shipment tracking number of any order via a direct request to the updateTrackingNumber endpoint. Use...

CVE-2026-73117: Apache Software Foundation Apache Juneau: Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability in Apache Juneau

Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Response Splitting' vulnerability in Apache Juneau. The Apache Juneau REST server passed response header values and redirect targets to the servlet container unchecked. An application that sets a response header or redirect target fr...

CVE-2026-123207: LibreSpark LibreTV: LibreTV before v2.21.2 contains a server-side request forgery vulnerability that allows authenticated users to bypass…

LibreTV before v2.21.2 contains a server-side request forgery vulnerability that allows authenticated users to bypass checkUpstreamAllowed by exploiting unpinned DNS resolution in fetchWithSafeRedirects. Attackers controlling authoritative DNS can return public addresses during validation and...

CVE-2026-111489: TPC Software Matchpoint: A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint…

A static credential embedded in the mobile app has been reported to return the 'autorizado' token on the MatchPoint platform. The report states that this token grants unauthenticated access to API services...