Ivan Ivanenko Librera Reader security vulnerability

The Librera Reader version 7222 by Ivan Ivanenko contains a security vulnerability stemming from improper permission settings. This vulnerability may allow unauthorized attackers to write and truncate files within shared storage space outside the sandbox...

CVE-2026-16889: Apereo Foundation openEQUELLA: In openEQUELLA before 2026.1, the pre-login notice image upload endpoint (PUT /api/preloginnotice/image/{name}) does…

In openEQUELLA before 2026.1, the pre-login notice image upload endpoint PUT /api/preloginnotice/image/name does not validate the type of uploaded files and serves them with a Content-Type derived from the supplied filename. A user holding the EDITSYSTEMSETTINGS permission can upload an HTML file...

CVE-2026-66090: Apereo Foundation openEQUELLA: In openEQUELLA before 2026.1, the XML parser used for item metadata does not disable external entity resolution

In openEQUELLA before 2026.1, the XML parser used for item metadata does not disable external entity resolution. A user permitted to create items CREATEITEM can submit crafted XML to POST /api/item and cause the server to read arbitrary files accessible to the openEQUELLA service, or make request...

CVE-2026-107052: n/a: Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized…

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path...

CVE-2026-107018: n/a: Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read…

Insecure permissions in Ghost Commander File Manager versionCode 479 allows unauthorized attackers to arbitrarily read and write files inside the commander's private storage...

CVE-2026-119250: Ubiquiti Inc WiFiman Desktop for macOS: A malicious actor with local access and low privileges could exploit an External Control of File Name or Path…

A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop for macOS to execute arbitrary commands with root privileges on the host device...

CVE-2026-106036: Krajowa Izba Rozliczeniowa Szafir: Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS…

Szafir accepts any client or server certificate without performing certificate and hostname validation, allowing HTTPS connections without authenticating the remote server. An attacker can provide an arbitrary SSL/TLS certificate and cause the application to download an update file from their...

CVE-2026-103693: Unknown: The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an…

The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that can lead to...

OpenBMB XAgent security vulnerability

The OpenBMB XAgent v1.0.0 version contains a security vulnerability. This vulnerability stems from a directory traversal issue in the file upload handling within line 46 of ToolServer/ToolServerNode/main.py, potentially allowing attackers to access arbitrary files via path traversal...

VTK buffer error vulnerability

Version 9.6.1 of VTK contains a buffer error vulnerability. This vulnerability stems from a heap buffer overflow in the FindVariableOffsets function within VTKWindBladeReader. A specially crafted .wind file can trigger this buffer overflow; attackers can supply such malicious files to exploit the...

Important: aspell security update

GNU Aspell is a spell checker designed to eventually replace Ispell. It can either be used as a library or as an independent spell checker. Security Fixes: aspell: aspell: Arbitrary code execution via crafted dictionary file CVE-2026-103658 For more details about the security issues, including th...

ALSA-2026:92458 Important: aspell security update

GNU Aspell is a spell checker designed to eventually replace Ispell. It can either be used as a library or as an independent spell checker. Security Fixes: aspell: aspell: Arbitrary code execution via crafted dictionary file CVE-2026-103658 For more details about the security issues, including th...

Alibaba Cloud Linux 3 : 0329: vim (ALINUX3-SA-2026:0329)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0329 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-73073: Vim is an open source, command line...

CVE-2026-107052

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path...

CVE-2026-107052

Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path...

RHEL 8 : mrtg (RHSA-2026:91844)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:91844 advisory. The Multi Router Traffic Grapher MRTG monitors the traffic load on network connections. MRTG generates HTML pages containing PNG images which provid...

RHEL 9 : buildah (RHSA-2026:90424)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90424 advisory. The buildah package provides a tool for facilitating building OCI container images. Among other things, buildah enables you to: Create a...

CVE-2026-9536: vtk: A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk…

A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk versions: 9.6.1. A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...

RHEL 9 : podman (RHSA-2026:90362)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:90362 advisory. The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use...

Python < 3.10.22 / 3.11.x < 3.11.17 / 3.12.x < 3.12.15 / 3.13.x < 3.13.16 / 3.14.x < 3.14.0b1 Link Following

The version of Python installed on the remote Windows host is prior to 3.10.22, or is 3.11.x prior to 3.11.17, or 3.12.x prior to 3.12.15, or 3.13.x prior to 3.13.16, or 3.14.x prior to 3.14.0b1. It is, therefore, affected by a link following vulnerability. In CPython 3.13 and earlier, the tarfil...