CVE-2026-85407 Eleveo Quality Management Conversation events denial of service

A vulnerability was found in Eleveo Quality Management 9.7.0. This issue affects some unknown processing of the file /enc-fwk-data/api/v3/conversations//events of the component Conversation Handler. The manipulation of the argument labels results in denial of service. The attack can be executed...

CVE-2026-85407

A denial of service vulnerability exists in Eleveo Quality Management 9.7.0 , specifically in the Conversation Handler component at the endpoint /enc-fwk-data/api/v3/conversations//events. Manipulation of the labels argument leads to DoS. The attack is remote and requires low privileges (authenti...

EUVD-2026-70815

MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in the SAYMOOS variable handler that passes unsanitized text to a shell command. Attackers can publish SAYMOOS messages containing backticks or command substitution syntax to execute arbitrary commands as the iSay process...

EUVD-2026-70766

A vulnerability was found in D-Link DNS-340L 1.01B04. Affected by this issue is some unknown functionality of the file /cgi-bin/dropbox.cgi of the component CGI Handler. Performing a manipulation of the argument callbackurl/syncinterval results in os command injection. The attack can be initiated...

PT-2026-91807

undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and closes the connection, the retry handler retries the request. If the retry returns a non-retryable status...

PT-2026-85517

GFI Exinda AI before 7.6.5 contains a path traversal vulnerability in the system maintenance configuration download handler. The wcf handle download function accepts parameters prefixed with v del and appends their values directly to the base configuration directory path without sanitizing for...

PT-2026-85480

SiYuan versions before v3.8.2 contain a path guard bypass vulnerability in the MCP file-access handler that uses case-sensitive matching on Linux filesystems. Attackers can read the protected publishAccess.json file by requesting case-variant paths like PublishAccess.json to disclose sensitive...

PT-2026-85394

Name of the Vulnerable Software and Affected Versions Eleveo Quality Management version 9.7.0 Description A remote denial of service issue exists in the Conversation Handler component. The problem occurs during the processing of the '/enc-fwk-data/api/v3/conversations//events' endpoint when the...

PT-2026-85416

The WPFunnels WordPress plugin before 3.13.0 does not perform any authorisation or nonce check in one of its opt-in submission handlers, and takes the notification recipients and subject from the request, allowing unauthenticated users to make the site send emails to arbitrary recipients with an...

CVE-2026-85582: Allocation of Resources Without Limits or Throttling

SiYuan versions before v3.8.2 contain an unbounded session creation vulnerability in the publish-service Basic Auth handler that allows authenticated attackers to exhaust memory. Attackers can repeatedly authenticate with valid credentials to create persistent session entries without expiry or...

CVE-2026-85580: Improper Limitation of a Pathname to a Restricted Directory

SiYuan versions before v3.8.2 contain a path guard bypass vulnerability in the MCP file-access handler that uses case-sensitive matching on Linux filesystems. Attackers can read the protected publishAccess.json file by requesting case-variant paths like PublishAccess.json to disclose sensitive...

CVE-2026-79632: Missing Authorization

The WPFunnels WordPress plugin before 3.13.0 does not perform any authorisation or nonce check in one of its opt-in submission handlers, and takes the notification recipients and subject from the request, allowing unauthenticated users to make the site send emails to arbitrary recipients with an...

CVE-2026-85407: Improper Resource Shutdown or Release

A vulnerability was found in Eleveo Quality Management 9.7.0. This issue affects some unknown processing of the file /enc-fwk-data/api/v3/conversations/ /events of the component Conversation Handler. The manipulation of the argument labels results in denial of service. The attack can be executed...

PT-2026-85449

Name of the Vulnerable Software and Affected Versions fastify versions 4.0.0 through 5.12.1 Description An unauthenticated attacker can bypass authentication hooks and break prefix encapsulation by sending a malformed URL. The internal not-found router for encapsulated handlers dispatches malform...

CVE-2026-18149: Missing Release of Resource after Effective Lifetime

undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and closes the connection, the retry handler retries the request. If the retry returns a non-retryable status...

CVE-2026-18149: Missing Release of Resource after Effective Lifetime

undici's retry handler can leave an already-exposed response body pending forever. When a server returns a successful response that declares a Content-Length, sends only part of the body, and closes the connection, the retry handler retries the request. If the retry returns a non-retryable status...

PT-2026-86159

Name of the Vulnerable Software and Affected Versions undici versions 7.11.0 through 7.29.0 undici versions 8.0.0 through 8.10.1 Description The retry handler can leave a response body pending indefinitely. This occurs when a server provides a successful response with a Content-Length but closes...

PT-2026-110906

Name of the Vulnerable Software and Affected Versions containerd versions prior to 1.7.35 containerd versions prior to 2.0.12 containerd versions prior to 2.2.8 containerd versions prior to 2.3.5 Description The layer unpack handler in containerd contains a flaw where processing certain opaque...

PT-2026-91365

In the Linux kernel, the following vulnerability has been resolved: HID: nintendo: fix out-of-bounds read in joycon ctlr read handler joycon ctlr read handler casts an incoming HID input report to struct joycon input report and parses it, guarding the cast only with a 12-byte length check: if siz...

PT-2026-85522

A security vulnerability has been detected in StackStorm st2 up to 3.9.0. Impacted is an unknown function of the file st2api/st2api/controllers/v1/auth.py of the component API Key Handler. Such manipulation of the argument api key api.user leads to improper privilege management. The attack may be...