EUVD-2026-93464

Payload is a free and open source headless content management system. In versions before 3.88.0 and canary versions before 4.0.0-canary.27, an untrusted user who can query a readable collection, control its sorting, and select a protected field as the sort parameter can infer limited information...

EUVD-2026-93463

Payload is a free and open source headless content management system. Payload versions from 3.0.0 before 3.90.0 and canary versions from 4.0.0-canary.0 before 4.0.0-canary.34 use a lower-than-recommended PBKDF2 work factor for password hashing, reducing the computational effort required to test...

EUVD-2026-93081

Editor Privilege Escalation in Import and export users and customers = 2.5.5 versions...

EUVD-2026-93056

Unauthenticated Cross Site Scripting XSS in Video Background Block – Use video as background in the section. = 2.0.3 versions...

EUVD-2026-92984

Memory corruption while processing service requests...

EUVD-2026-92983

Memory Corruption when executing system service routines due to improper handling of user input buffers...

EUVD-2026-92982

Memory Corruption when asynchronous threads access shared performance counter data simultaneously during FastRPC invocations...

EUVD-2026-92981

Transient DOS when processing a continuous receive command with a zero-sized global configuration override...

EUVD-2026-92980

Memory corruption when processing draw objects of incorrect type during graphics command list execution...

EUVD-2026-92979

Memory Corruption when accessing and modifying geographic mapping data concurrently without proper synchronization...

EUVD-2026-92978

Cryptographic Issue when processing non-ELF partitions, authentication and signature checks are bypassed, allowing unsigned or corrupted images to be mounted and processed...

EUVD-2026-92977

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms...

EUVD-2026-92976

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization...

EUVD-2026-92975

Memory Corruption when processing camera operations due to out-of-bounds write during driver updates...

EUVD-2026-92972

Memory corruption when processing camera requests with excessive batch and IO buffer configurations exceeds allocated memory size...

EUVD-2026-92971

Memory corruption when non-secure loader rewrites page tables before secure memory initialization...

EUVD-2026-92970

Memory corruption while processing IOCTL command called from user space to the kernel with invalid parameters...

EUVD-2026-92819

When proxy networking with CA injection is enabled, a build can modify its CA bundle before cleanup. This may cause cleanup to block, operate outside the build rootfs, or fail without failing the build...

EUVD-2026-92626

In multiple locations, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-92617

In multiple places, there is a possible denial of service due to an uncaught exception. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...