CVE-2026-12945: Authorization Bypass Through User-Controlled Key

IBM Langflow OSS 1.0.0 through 1.10.1 allows authenticated users to access and manipulate other users' build jobs through improper access control on log retrieval and unauthenticated build endpoints...

CVE-2026-16308: Allocation of Resources Without Limits or Throttling

IBM Enterprise Build of Quarkus 3.27.1 through 3.27.4.SP2, and 3.33.1 through 3.33.2.SP2 Quarkus REST could allow a remote attacker to cause a denial of service due to unbounded accumulation of multipart MIME part-header bytes...

VulnCheck KEV: CVE-2022-36883

A missing permission check in Jenkins Git Plugin 4.11.3 and earlier allows unauthenticated attackers to trigger builds of jobs configured to use an attacker-specified Git repository and to cause them to check out an attacker-specified commit...

PT-2026-66520

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.10.1 Description Improper access control allows authenticated users to access and manipulate build jobs belonging to other users. This issue occurs through the log retrieval and unauthenticated build...

The vulnerability of the seg6_build_state() function in the net/ipv6/seg6_iptunnel.c module of the Linux operating system allows a attacker to cause a service failure.

The vulnerability of the seg6buildstate function in the net/ipv6/seg6iptunnel.c module of the Linux kernel is related to synchronization errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

phantom-frida v17.16.4-20260726-run33.1

phantom-frida phantom-frida builds Android Frida Server and Gadget from source while changing a targeted set of observable runtime identifiers. It is a builder and verification harness, not a promise that every application-specific detection method is defeated. The current compatibility target is...

CVE-2026-18022 pgvector buffer overflow via integer wraparound in IVFFlat index build on 32-bit systems

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected...

ROOT-APP-MAVEN-CVE-2026-47838 CVE-2026-47838 in io.root.org.springframework.security:spring-security-web - Patched by Root

Root has patched CVE-2026-47838 in the io.root.org.springframework.security:spring-security-web package for Root:Maven. Multiple fixed versions available...

@easyv/swagger-api-types (0.1.7), @evergis/api (>=4.1.7, <=5.0.55) +23 more potentially affected by CVE-2026-54661 via swagger-typescript-api (>=13.0.1, <=13.6.5)

swagger-typescript-api NPM version =13.0.1, =4.1.7, =1.3.4, =1.4.0, =0.0.65, =0.0.1, =0.0.1, =0.0.7-rc2, =1.2.5, =1.0.7, =0.1.5, =1.2.3, =1.2.6, =1.2.7 and more Source cves: CVE-2026-54661 Source advisory: OSV:GHSA-38C3-WV3C-V3XJ...

Exploit for CVE-2026-52832

CVE-2026-52832-PoC-exploit-nuclei-dashboard Nuclio Dashboard...

CVE-2026-18022: Integer Overflow or Wraparound

Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected...

Build Numbers and Versions of Veeam Plug-In for Verge OS

This KB article lists all versions of the Veeam Plug-In for Verge OS and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for Verge OS 1 Releases Veeam Plug-In for Verge OS 1.0 Included with Veeam Backup & Replication 13.1 | 13.1.0.1...

Build Numbers and Versions of Veeam Plug-In for Sangfor aSV

This KB article lists all versions of the Veeam Plug-In for Sangfor aSV and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for Sangfor aSV 1 Releases Veeam Plug-In for Sangfor aSV 1.0 Included withVeeam Backup & Replication 13.1 |...

Build Numbers and Versions of Veeam Plug-In for Platform9

This KB article lists all versions of the Veeam Plug-In for Platform9 and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for Platform9 1 Releases Veeam Plug-In for Platform9 1.0 Included with Veeam Backup & Replication 13.1 |...

Build Numbers and Versions of Veeam Plug-In for Xen

This KB article lists all versions of the Veeam Plug-In for Xen and their respective worker build numbers. Version | Plug-In / Worker Build | Release Date ---|---|--- Veeam Plug-In for Xen 1 Releases Veeam Plug-In for Xen 1.0 Included with Veeam Backup & Replication 13.1 | 13.1.0.295 | 2026-07-29...

NewStart CGSL MAIN 6.06 : docker-ce Vulnerability (NS-SA-2026-0054)

The remote NewStart CGSL host, running version MAIN 6.06, has docker-ce packages installed that are affected by a vulnerability: - Moby is an open-source project created by Docker to enable software containerization. The classic builder cache system is prone to cache poisoning if the image is bui...

CVE-2026-14893

IBM Observability with Instana Agent Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution through its configuration normalization API...

CVE-2026-14893 IBM Instana Observability is affected by multiple Prototype Pollution within Instana Agent container image

IBM Observability with Instana Agent Build 1.0.303 through 1.0.320 IBM Instana Node.js tracer component @instana/core version 6.2.1 is vulnerable to prototype pollution through its configuration normalization API...

CVE-2026-67184

TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute function fails to allocate the Url object when version...

CVE-2026-58404

A flaw was found in Hugo, a static site generator. The default security policy intended to deny requests to loopback, internal, and cloud-metadata IPv4 addresses could be bypassed. This occurred because the deny rule only matched dotted-decimal notation, allowing alternate IPv4 encodings integer,...