CVE-2026-92370 Remote Session Access Control Bypass Leading to Remote Code Execution

An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for...

EUVD-2026-89023

UnoPim versions before 2.0.1 and 2.1.1 trust all connecting clients as proxies and honor the X-Forwarded-Host header without validation, allowing unauthenticated attackers to inject arbitrary origins into admin layout pages. Attackers can set X-Forwarded-Host to redirect JavaScript asset loading ...

CVE-2026-102630

The software UnoPim is vulnerable to Cache Poisoning in versions before 2.0.1 and 2.1.0 before 2.1.1 . The root cause is that the application trusts all connecting clients as proxies and honors the X-Forwarded-Host header without validation. This allows an unauthenticated attacker to inject arbit...

CVE-2026-102630 UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-Host

UnoPim versions before 2.0.1 and 2.1.1 trust all connecting clients as proxies and honor the X-Forwarded-Host header without validation, allowing unauthenticated attackers to inject arbitrary origins into admin layout pages. Attackers can set X-Forwarded-Host to redirect JavaScript asset loading ...

CVE-2026-102630 UnoPim 2.0.0 before 2.0.1 and 2.1.0 before 2.1.1 Cache Poisoning via X-Forwarded-Host

UnoPim versions before 2.0.1 and 2.1.1 trust all connecting clients as proxies and honor the X-Forwarded-Host header without validation, allowing unauthenticated attackers to inject arbitrary origins into admin layout pages. Attackers can set X-Forwarded-Host to redirect JavaScript asset loading ...

CVE-2026-92371 Local Privilege Escalation via Improper Link Resolution in Cloud Session Recording

TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording CSR functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged...

CVE-2026-92371 Local Privilege Escalation via Improper Link Resolution in Cloud Session Recording

TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording CSR functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged...

CVE-2026-92371

Prior versions of TeamViewer Full Client and Host for Linux (before version 15.82 ) are vulnerable to a Local Privilege Escalation via improper link resolution in the Cloud Session Recording (CSR) functionality. A local authenticated attacker can exploit a race condition during path validation an...

EUVD-2026-89021

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...

CVE-2026-92368 Heap-Based Buffer Overflow in TeamViewer Session Recording Playback Leads to Remote Code Execution

TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user...

CVE-2026-92368

Prior versions of TeamViewer Full Client and Host for Linux and macOS (before 15.82) are vulnerable to a heap-based buffer overflow during the processing of .tvs session recording files . The flaw is caused by a size mismatch during the decompression of recorded session data, which can lead to ou...

EUVD-2026-89020

TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace rollback backup files stored in a user-writable temporary directory before they are restored by an elevated installer,...

EUVD-2026-89019

Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges NT AUTHORITY/SYSTEM \ root. By sending crafted I...

CVE-2026-19743 Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients

Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges NT AUTHORITY/SYSTEM \ root. By sending crafted I...

CVE-2026-72744-poc

CVE-2026-72744: Fuga de información del endpoint Chrome DevTools de Nuxt PoC English version Resumen Este repositorio es una Prueba de Concepto PoC de la vulnerabilidad de fuga de información CVE-2026-72744 presente en el endpoint del workspace de Chrome DevTools del servidor de desarrollo de Nux...

CVE-2026-93330

Improper rule enforcement in the PAM Active Directory provider in Devolutions Server 2026.3.5 allows a user with PAM edit permissions to bypass the Devolutions Gateway host ruleset...

CVE-2026-53360-POC

CVE-2026-53360: KVM SEV-SNP PSC heap out-of-bounds Proof of concept for a heap out-of-bounds read and write in KVM's SEV-SNP Page State Change PSC handling. A malicious SEV-SNP guest makes the host kernel walk a PSC entry array off the end of its slab allocation. That leaks the layout of...

CVE-2026-39949

CVE-2026-39949: Authenticated Remote Code Execution in Cacti Through Host Variable Injection Summary An OS command injection vulnerability in Cacti ≤ 1.2.30 allows any authenticated user with device and graph template creation privileges to execute arbitrary commands on the underlying server. The...

Insufficiently Protected Credentials

Overview apache-airflow-providers-snowflake is a Provider package apache-airflow-providers-snowflake for Apache Airflow Affected versions of this package are vulnerable to Insufficiently Protected Credentials via unsanitized interpolation of the account and region connection fields into Snowflake...

CVE-2026-100722

A flaw was found in vm2. An attacker who can execute untrusted code within the sandbox can trigger an unhandled error by instantiating host-provided functions that return a rejected asynchronous operation Promise. Due to missing error handling in the sandbox-to-host object construction trap, the...