CVE-2026-106034

A Path Traversal vulnerability exists in Ivanti Xtraction before version 2026.4 . This flaw allows a remote authenticated attacker to create or modify arbitrary directories on the host file system. The vulnerability is categorized under CWE-22: Improper Limitation of a Pathname to a Restricted Di...

CVE-2026-104867

The admin route "GET /api/admin/users/id/calendar-heatmap" is declared with "@Authenticated permission: Permission.UserRead " instead of "@Authenticated permission: Permission.AdminUserRead, admin: true ", and the service method behind it performs no ownership or role check. Every other endpoint ...

EUVD-2026-98820

MongoDB Server's collection validation feature may not properly handle certain expressions stored in a validator. In some cases, this can cause the server process to stop running when a document is later inserted. The behavior can occur for authenticated users with write access...

CVE-2026-103965

An issue in MongoDB Server's aggregation framework can cause certain constant values to be handled incorrectly during internal query rewriting. Under certain conditions, an authenticated user with read access may receive field values in aggregation output that the query did not intend to return...

CVE-2026-96299

The MongoDB Server is vulnerable to a memory exhaustion (OOM ) condition due to missing resource limits in the match expression evaluator . The flaw allows an authenticated user with read-only privileges to execute an aggregation query using nested internal schema validation operators (intended f...

CVE-2026-103028

SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by deniedpatterns or outside allowedpatterns to an allowed destination name because file-pattern filters are evaluated only on the...

CVE-2026-55376 heym Python Tool Sandbox Escape

Heym builds and runs agentic systems and business-process automations on self-hosted infrastructure. Prior to 0.0.40, an authenticated user who can create or edit a workflow with an Agent custom Python tool can bypass the blacklist-based sandbox in backend/app/services/pythontoolexecutor.py becau...

CVE-2026-103028

The open-source file transfer solution SFTPGo (versions 2.5.0 through 2.7.6 ) is vulnerable to a source-side file-pattern filter bypass. An authenticated user with copy permissions can copy files restricted by denied_patterns or those outside allowed_patterns to an allowed destination because fil...

CVE-2026-103028 SFTPGo source-side file-pattern filter bypass during copy operations

SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by deniedpatterns or outside allowedpatterns to an allowed destination name because file-pattern filters are evaluated only on the...

CVE-2026-103028 SFTPGo source-side file-pattern filter bypass during copy operations

SFTPGo is an open source, event-driven file transfer solution. From 2.5.0 until 2.7.6, an authenticated user with copy permission can copy a source file denied by deniedpatterns or outside allowedpatterns to an allowed destination name because file-pattern filters are evaluated only on the...

CVE-2026-77375 SFTPGo: Denial of service via malformed SSH channel request

SFTPGo is an open source, event-driven file transfer solution. Prior to 2.7.5, an authenticated SSH user can send a malformed protocol message while opening a channel, causing an unhandled error that terminates the server process and affects all connected users until restart. No confidentiality o...

CVE-2026-107918 Insufficient input validation vulnerability in NETGEAR R7300

Insufficient input validation vulnerability in the LAN Setup feature of NETGEAR R7300 router allows authenticated administrators connected to the local network to perform unauthorized actions on the router.This issue was identified through testing in a controlled research environment using a...

CVE-2026-109960 Froxlor 2.0.0 before 2.3.14 Stored XSS via Customer Theme Value

Froxlor 2.0.0 before 2.3.14 contains a stored cross-site scripting vulnerability that allows authenticated customers to inject HTML and JavaScript by setting a malicious theme value via customerindex.php. Script executes when an administrator views the customer overview with the Theme column...

CVE-2026-109957

Versions of EspoCRM prior to 10.0.7 are vulnerable to an Insecure Direct Object Reference (IDOR) flaw. This vulnerability exists in the Import endpoint , where authenticated users with Import scope access can read attachments belonging to other users by providing a foreign attachmentId . An attac...

CVE-2026-63316

A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into "in" and "notin" query paramethers allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 3.90.0 and 4.0.0-canary.34...

CVE-2026-63316

A SQL injection vulnerability exists in Payload CMS due to the improper neutralization of user-provided input within the "in" and "not_in" query parameters. This flaw allows an authenticated attacker to execute arbitrary SQL commands. The issue was addressed in versions 3.90.0 and 4.0.0-canary.34...

CVE-2026-63316 SQL Injection in Payload CMS

A SQL injection vulnerability has been identified in Payload CMS. Improper neutralization of input provided by user into "in" and "notin" query paramethers allows an authenticated attacker to perform SQL Injection attacks. This issue was fixed in version 3.90.0 and 4.0.0-canary.34...

CVE-2026-89198

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly validate or sanitize the filename of firmware files uploaded to the system. This could allow an authenticated attacker with specific privileges to execute arbitrary SQL commands on the...

CVE-2026-89199

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly restrict access to sensitive configuration items via specific database queries. This could allow an authenticated attacker to retrieve administrative credentials for various internal...

CVE-2026-89201

A vulnerability has been identified in RUGGEDCOM CROSSBOW All versions V6.0. Affected devices do not properly validate or sanitize input in device group or facility names processed during the Bulk Export workflow. This could allow an authenticated attacker with specific privileges to execute...