CVE-2026-90786

A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function alignordermembers of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion. The attack can be initiated remotely. The exploit has been...

CVE-2026-90788

A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html of the component Template Handler. Performing a manipulation results i...

CVE-2026-86348

Mattermost versions =11.9 11.0.9 11.4.8 11.7.7 10.22.11.0 fail to recover from handler panics, which allows an authenticated user to crash the plugin via a post-action request with an unexpected field type.. Mattermost Advisory ID: MMSA-2026-00701...

CVE-2026-90788

A remote OS command injection vulnerability affects the Template Handler component of magicblack MacCMS10 (version 2026.1000.4055), specifically via manipulation of the file admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html. The attack requires high privileges (authe...

CVE-2026-90788 magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection

A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html of the component Template Handler. Performing a manipulation results i...

EUVD-2026-77489

A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html of the component Template Handler. Performing a manipulation results i...

CVE-2026-90788 magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection

A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html of the component Template Handler. Performing a manipulation results i...

CVE-2026-90788 magicblack MacCMS10 Template .%40template%40default%40html%40label.html os command injection

A security flaw has been discovered in magicblack MacCMS10 2026.1000.4055. Affected by this vulnerability is an unknown functionality of the file /admin1.php/admin/template/index/path/.%40template%40default%40html%40label.html of the component Template Handler. Performing a manipulation results i...

CVE-2026-86348

Mattermost versions =11.9 11.0.9 11.4.8 11.7.7 10.22.11.0 fail to recover from handler panics, which allows an authenticated user to crash the plugin via a post-action request with an unexpected field type.. Mattermost Advisory ID: MMSA-2026-00701...

CVE-2026-86348 MS Calendar plugin: unrecovered handler panics from malformed post-action requests could crash the plugin process

Mattermost versions =11.9 11.0.9 11.4.8 11.7.7 10.22.11.0 fail to recover from handler panics, which allows an authenticated user to crash the plugin via a post-action request with an unexpected field type.. Mattermost Advisory ID: MMSA-2026-00701...

CVE-2026-86348

CVE-2026-86348 affects the MS Calendar plugin for Mattermost (versions ≤11.9, 11.0.9, 11.4.8, 11.7.7, and 10.22.11.0). The plugin fails to recover from handler panics triggered by a post-action request containing an unexpected field type , allowing an authenticated user to crash the plugin proces...

EUVD-2026-77481

Mattermost versions =11.9 11.0.9 11.4.8 11.7.7 10.22.11.0 fail to recover from handler panics, which allows an authenticated user to crash the plugin via a post-action request with an unexpected field type.. Mattermost Advisory ID: MMSA-2026-00701...

CVE-2026-90786 Dvidelabs flatcc Duplicate Symbol semantics.c align_order_members assertion

A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function alignordermembers of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion. The attack can be initiated remotely. The exploit has been...

CVE-2026-90786 Dvidelabs flatcc Duplicate Symbol semantics.c align_order_members assertion

A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function alignordermembers of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion. The attack can be initiated remotely. The exploit has been...

CVE-2026-90786

Dvidelabs flatcc (up to version 0.6.3 ) contains a vulnerability in the Duplicate Symbol Handler component, specifically in the align_order_members function within src/compiler/semantics.c. The flaw allows a reachable assertion to be triggered via crafted input. The attack can be initiated remote...

EUVD-2026-77478

A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function alignordermembers of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion. The attack can be initiated remotely. The exploit has been...

CVE-2026-90786 Dvidelabs flatcc Duplicate Symbol semantics.c align_order_members assertion

A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function alignordermembers of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion. The attack can be initiated remotely. The exploit has been...

CVE-2026-90713

A security flaw has been discovered in vllm-project vLLM up to 0.29.0. The affected element is the function TiktokenTokenizer::new of the file rust/src/text/src/backend/hf/mod.rs of the component tiktoken vocab File Handler. The manipulation results in denial of service. The attack is only possib...

CVE-2026-90713

A flaw was found in vLLM and tiktoken. A local attacker can exploit a vulnerability within the TiktokenTokenizer::new function of the tiktoken vocab File Handler component. This can lead to a denial of service, making the affected system unavailable. Mitigation Mitigation for this issue is either...

CVE-2026-90927 filebrowser through 2.63.23 Denial of Service via unbounded WebSocket message

filebrowser through 2.63.23 fails to limit WebSocket message size in the /api/command handler before checking permissions, allowing authenticated users to buffer arbitrarily large messages. Attackers can send oversized WebSocket messages to exhaust server heap memory and cause denial of service...