CVE-2026-111754: angular: Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and…

Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages. Prior to 20.3.33, 21.2.25, and 22.2.1, ServerPlatformLocation in Angular server-side rendering checks for protocol-relative URLs before WHATWG URL normalization. A...

CVE-2026-99259: Linux: In the Linux kernel, the following vulnerability has been resolved: soc/tegra: pmc: Fix uninitialised clock rate For…

In the Linux kernel, the following vulnerability has been resolved: soc/tegra: pmc: Fix uninitialised clock rate For legacy 32-bit Tegra devices, the warning in the tegrapmcentersuspendmode function is being triggered because the earlypmc-rate variable is never configured and hence, always 0. Thi...

CVE-2026-121506: NTPsec: An out-of-bounds read and write in NTS client extension field parsing (extens_client_recv) in NTPsec before 1.2.5…

An out-of-bounds read and write in NTS client extension field parsing extensclientrecv in NTPsec before 1.2.5 allows a remote attacker who can send NTP server-mode replies to an NTS client to corrupt heap memory and crash ntpd, and, combined with the NTS-KE client out-of-bounds read fixed in 1.2....

CVE-2026-65140: NVIDIA Slurm: NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that…

NVIDIA Slurm contains some inconsistent authorization checks against the Operator permission level in the SlurmDBD that can be chained together in a way that would permit an Operator to make themselves an Administrator...

CVE-2026-121553: cotonti: Cotonti through 1.0.0 generates registration and email-change validation tokens with md5(microtime()), allowing…

Cotonti through 1.0.0 generates registration and email-change validation tokens with md5microtime, allowing attackers to bypass email-ownership verification by predicting tokens. Attackers can derive the generation time from the HTTP Date header and compute candidate tokens offline. They then...

CVE-2026-121125: Google Chrome: Information leak in ServiceWorker in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised…

Information leak in ServiceWorker in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-89229: vivo BlueLM Copilot: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the ShareActivity component of BlueLM…

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' in the ShareActivity component of BlueLM Copilot com.vivo.ai.copilot allows a malicious application installed on the same device to write arbitrary files via a crafted ACTIONSEND intent with a ContentProvider-supplied fi...

CVE-2026-108046: AM System ALO Suite: Direct Object Reference (IDOR) vulnerability in Alosuite due to insufficient authorization checks when processing…

Direct Object Reference IDOR vulnerability in Alosuite due to insufficient authorization checks when processing object identifiers. By modifying the identifier provided to the ‘/Companies/Edit/id’ endpoint, an attacker can access information associated with other companies or users without the...

CVE-2026-120544: kodezen: The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Directory…

The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.0.1 via the 'id' parameter. This makes it possible for authenticated attackers, with contributor-level access and above, to read...

CVE-2026-121382: Netcore NBR100V2: A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928

A vulnerability was determined in Netcore NBR100V2 1.3.240614.030928. Affected by this issue is the function msgaesdec of the file /usr/bin/autoac. This manipulation causes integer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized...

CVE-2026-121454: padloc: Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer._handleScimGet() that allows…

Padloc through 4.3.0 contains a missing authentication vulnerability in ScimServer.handleScimGet that allows unauthenticated attackers to read SCIM directories by sending any non-empty bearer token. Attackers who know an organization id can query the Users and Groups SCIM endpoints to retrieve...

CVE-2026-121543: a466350665 smart-sso: smart-sso through 2.0.1 contains an incorrect authorization vulnerability in PermissionFilter that allows any…

smart-sso through 2.0.1 contains an incorrect authorization vulnerability in PermissionFilter that allows any authenticated user to call admin console APIs because unlisted paths are permitted by default. Attackers can call /admin/user-role/save to assign themselves the administrator role, reset...

CVE-2026-119485: weDevs Dokan: Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access Control…

Missing Authorization vulnerability in weDevs Dokan dokan-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Dokan: from n/a through 5.3.2...

CVE-2026-121626: willamowius gnugk: GNU Gatekeeper (gnugk) before 5.16 contains an out-of-bounds read vulnerability in H46024Socket::ReceivedProbePacket()…

GNU Gatekeeper gnugk before 5.16 contains an out-of-bounds read vulnerability in H46024Socket::ReceivedProbePacket that allows remote attackers to cause a heap over-read by sending short probe packets. Attackers can send a short application-defined RTCP packet to the media port during H.460.24...

CVE-2026-121547: Canop dysk: Canop dysk before 3.8.2 contains a terminal escape sequence injection vulnerability that allows local users to inject…

Canop dysk before 3.8.2 contains a terminal escape sequence injection vulnerability that allows local users to inject control sequences by crafting mount metadata rendered unsanitized in table and CSV output. Attackers can create FUSE mounts with ESC/OSC sequences in mount-point names or fsname,...

CVE-2026-109594: SonicWall Global Management System (GMS): Post-authentication Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability…

Post-authentication Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability has been identified in the End-of-Life SonicWall GMS 9.5.2 and earlier versions which in specific conditions could potentially allow an authenticated attacker to access or modify...

CVE-2026-120756: The HDF Group HDF5: HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5O__chunk_deserialize() in src/H5Ocache.c

HDF5 through 2.2.0 contains a heap buffer over-read vulnerability in H5Ochunkdeserialize in src/H5Ocache.c. When decoding object header messages, the declared message size is checked against the end of the chunk image before the remainder of the message header flags, and for version 2 object...

CVE-2026-121036: Google Chrome: Use after free in CSS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code…

Use after free in CSS in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-121729: 0xdps emailflare: emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes…

emailflare before commit cf31f33 contains a missing authorization vulnerability in the inbox service /api/keys routes that allows any authenticated member to list, create and revoke API keys. Attackers can mint a global live API key accepted by /v1/send to send mail from any domain, or revoke...

CVE-2026-77800: Zohocorp ManageEngine Key Manager Plus: ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows attackers…

ManageEngine Key Manager Plus versions before 7151 are vulnerable to a SAML authentication bypass that allows attackers to log in using SAML assertions meant for another service provider...