EUVD-2026-81330

Memory Corruption when copying unverified data from an external source exceeds the allocated buffer size...

EUVD-2026-81329

Transient DOS when processing unverified data from a neighboring system causes out of bound memory access...

EUVD-2026-81328

Transient DOS when processing large or numerous request buffers without sufficient memory allocation validation...

EUVD-2026-81326

Memory Corruption when processing I2C transfer requests due to a race condition between memory allocation and data copying...

EUVD-2025-210926

Memory Corruption when copying large input data exceeds normal allocation limits...

EUVD-2026-81070

decap-server contains a path traversal vulnerability in the local proxy containment guard that uses plain string prefix comparison without path separator validation. Attackers can access sibling directories whose names begin with the repository directory name to read, write, or delete files outsi...

EUVD-2026-80956

A remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition. Older unsupported versions may also be affected. Users are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, ...

EUVD-2026-80699

A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges...

EUVD-2026-80236

A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnosticstab/ajaxdiagtablerows endpoint using a valid user cookie allowing disclosure of all user password hashes...

EUVD-2026-80005

An insufficient check allowed for the overwrite of arbitrary files via a symlink...

EUVD-2026-79952

The affected products are missing authorization on state-changing CGIs and session checks are not performed...

EUVD-2026-79947

The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable...

EUVD-2026-79502

Netmaker makes networks with WireGuard. Prior to version 1.5.0, the sqliteDeleteRecord function in Netmaker's database layer constructs SQL DELETE statements using direct string concatenation of user-supplied input. This allows an authenticated attacker to perform boolean-based SQL injection...

EUVD-2026-79242

A maliciously constructed mail header could lead to multiple fields being parsed as one, or potential memory safety violations. This vulnerability was fixed in Thunderbird 156 and Thunderbird 140.16...

EUVD-2026-79015

In multiple locations, there is a possible escalation of privilege due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78994

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78992

In the Setup Wizard, there is a possible remote package install due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78988

In multiple files, there is a possible permission bypass due to a confused deputy. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78987

In multiple locations, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-78985

In multiple files, there is a possible out-of-bounds read due to type confusion. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...