153 matches found
CVE-2026-113594
Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change server-wide settings by calling the others.updateSettings tRPC mutation without the MANAGESETTINGS permission. Attackers can set a join password, disable registration, zero upload...
CVE-2026-113594 Sharkord before 0.0.8 Missing Authorization via updateSettings tRPC Route
Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change server-wide settings by calling the others.updateSettings tRPC mutation without the MANAGESETTINGS permission. Attackers can set a join password, disable registration, zero upload...
CVE-2026-113594 Sharkord before 0.0.8 Missing Authorization via updateSettings tRPC Route
Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change server-wide settings by calling the others.updateSettings tRPC mutation without the MANAGESETTINGS permission. Attackers can set a join password, disable registration, zero upload...
CVE-2026-113594 Sharkord before 0.0.8 Missing Authorization via updateSettings tRPC Route
Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change server-wide settings by calling the others.updateSettings tRPC mutation without the MANAGESETTINGS permission. Attackers can set a join password, disable registration, zero upload...
EUVD-2026-105160
Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change server-wide settings by calling the others.updateSettings tRPC mutation without the MANAGESETTINGS permission. Attackers can set a join password, disable registration, zero upload...
CVE-2026-113594
Sharkord versions before 0.0.8 are vulnerable to a missing authorization flaw in the others.updateSettings tRPC mutation. This allows any authenticated member to modify server-wide settings without the required MANAGE_SETTINGS permission. Exploitation can lead to a denial of service by allowing a...
PT-2026-118454
Sharkord before 0.0.8 contains a missing authorization vulnerability that allows any authenticated member to change server-wide settings by calling the others.updateSettings tRPC mutation without the MANAGE SETTINGS permission. Attackers can set a join password, disable registration, zero upload...
CVE-2026-96233
Out-of-bounds write in ASP.NET Core allows an unauthorized attacker to deny service over a network...
CVE-2026-88129
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network...
CVE-2026-88125
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network...
CVE-2026-83685
Buffer over-read in Windows IKE Extension allows an authorized attacker to deny service over a network...
CVE-2026-83516
Out-of-bounds read in Windows Local Security Authority Subsystem Service LSASS allows an unauthorized attacker to deny service over a network...
CVE-2026-70166
Out-of-bounds read in Windows DNS allows an authorized attacker to deny service over a network...
CVE-2026-69978
Null pointer dereference in Windows VMSwitch allows an authorized attacker to deny service locally...
CVE-2026-96233
A Denial-of-Service vulnerability exists in ASP.NET Core due to an out-of-bounds write . An unauthorized attacker can exploit this flaw over a network to disrupt the service. The vulnerability has a CVSS v3.1 score of 7.50 (High severity). No specific remediation or exploit details are provided i...
CVE-2026-88125
An out-of-bounds read vulnerability exists in the DNS Server , which could allow an authorized attacker to trigger a denial of service over a network. The vulnerability is associated with CWE-125 . While an official fix is noted in the remediation level, specific affected versions and detailed ro...
EUVD-2026-100159
Out-of-bounds read in DNS Server allows an authorized attacker to deny service over a network...
CVE-2026-88130
An out-of-bounds read vulnerability exists in the DNS Server , which allows an authorized attacker to perform a denial of service (DoS) over a network. The vulnerability is associated with CWE-125 . While the documents confirm the impact is a denial of service, no specific software versions, file...
CVE-2026-88129
An out-of-bounds read vulnerability exists in the DNS Server , which could allow an authorized attacker to perform a denial of service over a network. The vulnerability is associated with CWE-125 . No specific software versions, root causes, or remediation details are provided in the documents be...