CVE-2026-97662: Improper Neutralization of Argument Delimiters in a Command

An argument injection issue in the diff scan operation in AWS security-agent-mcp-server before version 0.2.0 might allow context-dependent threat actors to create, overwrite, or truncate arbitrary files on the host outside the intended workspace directory via a crafted reference value supplied to...

CVE-2026-51874: Undefined Security Weakness

In Devika v1.0, the Patcher Agent savecodetoproject function contains a path traversal vulnerability that allows attackers to write files outside the intended project workspace...

Amazon Linux 2 : amazon-ssm-agent (ALAS-2026-3963)

The version of amazon-ssm-agent installed on the remote host is prior to 3.3.5226.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2026-3963 advisory. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a...

Critical: amazon-ssm-agent

Issue Overview: Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. CVE-2026-42505 go-git is an extensible git implementation library written in pure Go. Prior to 5.19.2...

Rocky Linux 9.2 [CIQ] Security Update: qemu-guest-agent / qemu-guest-agent-debuginfo / qemu-img / etc Multiple Vulnerabilities (ciqsa-2026_0489)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260489 advisory. This advisory aggregates security fixes for the qemu-kvm SRPM in CIQ LTS 9.2. It addresses 3 CVEs: CVE-2024-3446, CVE-2024-7409, CVE-2023-2680. Tenable h...

CVE-2026-9864: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by...

@agent-tool-platform/agent-kit (>=0.2.0, <=0.4.0), @agent-tool-platform/ast-summarizer (>=0.1.0, <=0.1.1) +589 more potentially affected by CVE-2026-84504 via fastify (>=5.0.0, <=5.12.1)

fastify NPM version =5.0.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =1.0.4, =0.0.0-vBETA-20260417080530, =0.0.1, =1.60.2, =1.0.0, =0.0.0, =2.0.1, =0.1.0, =0.2.7 and more Source cves: CVE-2026-84504 Source advisory: OSV:GHSA-667R-XXJV-C9MM...

CVE-2026-51870

DeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool.execute...

CVE-2026-51866

In DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real /api/v1/skills/upload route can later be executed through the real /api/v1/chat/react-agent flow...

CVE-2026-51853

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/filebrowser.py:FileBrowser.init. The FileBrowser class initializes with the host root directory as the workspace, allowing the agent to access any file on the system without restriction...

CVE-2026-51852

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/filebrowser.py:FileBrowser.savefileb64. The savefileb64 method accepts user-controlled file paths without normalization or validation, allowing path traversal attacks...

GHSA-9J54-FG26-WV3R vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, openstack-glance-2025.1-fips, openstack-horizon-2025.1, py3-cassandra-medusa, superset, superset-fips, litellm, openstack-placement-2026.1, datahub-ingestion-fips, netbox-fips, openstack-placement-2025.2-fips, openstack-octavia-2025.2,...

CVE-2026-102266 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, openstack-glance-2025.1-fips, openstack-horizon-2025.1, py3-cassandra-medusa, superset, superset-fips, litellm, openstack-placement-2026.1, datahub-ingestion-fips, netbox-fips, openstack-placement-2025.2-fips, openstack-octavia-2025.2,...

GHSA-HXM8-2XGR-2P9M vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, openstack-glance-2025.1-fips, openstack-horizon-2025.1, py3-cassandra-medusa, superset, superset-fips, litellm, openstack-placement-2026.1, datahub-ingestion-fips, netbox-fips, openstack-placement-2025.2-fips, openstack-octavia-2025.2,...

GHSA-W2CX-738M-MC7W vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, openstack-glance-2025.1-fips, openstack-horizon-2025.1, py3-cassandra-medusa, superset, superset-fips, litellm, openstack-placement-2026.1, datahub-ingestion-fips, netbox-fips, openstack-placement-2025.2-fips, openstack-octavia-2025.2,...

GHSA-W6J9-CWV2-H6WQ vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, openstack-glance-2025.1-fips, openstack-horizon-2025.1, py3-cassandra-medusa, superset, superset-fips, litellm, openstack-placement-2026.1, datahub-ingestion-fips, netbox-fips, openstack-placement-2025.2-fips, openstack-octavia-2025.2,...

CVE-2026-101917 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, openstack-glance-2025.1-fips, openstack-horizon-2025.1, py3-cassandra-medusa, superset, superset-fips, litellm, openstack-placement-2026.1, datahub-ingestion-fips, netbox-fips, openstack-placement-2025.2-fips, openstack-octavia-2025.2,...

CVE-2026-102268 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, openstack-glance-2025.1-fips, openstack-horizon-2025.1, py3-cassandra-medusa, superset, superset-fips, litellm, openstack-placement-2026.1, datahub-ingestion-fips, netbox-fips, openstack-placement-2025.2-fips, openstack-octavia-2025.2,...

CVE-2026-102267 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, openstack-glance-2025.1-fips, openstack-horizon-2025.1, py3-cassandra-medusa, superset, superset-fips, litellm, openstack-placement-2026.1, datahub-ingestion-fips, netbox-fips, openstack-placement-2025.2-fips, openstack-octavia-2025.2,...

CVE-2026-102271 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, openstack-glance-2025.1-fips, openstack-horizon-2025.1, py3-cassandra-medusa, superset, superset-fips, litellm, openstack-placement-2026.1, datahub-ingestion-fips, netbox-fips, openstack-placement-2025.2-fips, openstack-octavia-2025.2,...