CVE-2026-82478

A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parserequest of the file tricksource/simservices/JSONVariableServer/JSONVariableServerThread.cpp of the component TCP Socket Handler. This manipulation causes stack-based buffer overflow...

PT-2026-83587

Name of the Vulnerable Software and Affected Versions Linux Foundation Magma version 1.9.0 Description Improper input validation occurs within the NGSetupRequest Handler component when the NG-IoT-DefaultPagingDRX argument is manipulated. This flaw allows for remote exploitation. Recommendations A...

PT-2026-83622

Name of the Vulnerable Software and Affected Versions TOTOLINK N600R version 4.3.0cu.7866 B20220506 Description An issue exists in the Authentication Handler component where the loginAuth function within the '/web cste/cgi-bin/cstecgi.cgi' endpoint uses insufficiently random values. This weakness...

PT-2026-83519

Name of the Vulnerable Software and Affected Versions NASA Trick version 19.6.0 Description A stack-based buffer overflow exists in the TCP Socket Handler component. This issue occurs within the JSONVariableServerThread::parse request function located in the trick source/sim...

CVE-2026-82478: Stack-based Buffer Overflow

A vulnerability was determined in NASA Trick 19.6.0. This issue affects the function JSONVariableServerThread::parserequest of the file tricksource/simservices/JSONVariableServer/JSONVariableServerThread.cpp of the component TCP Socket Handler. This manipulation causes stack-based buffer overflow...

CVE-2026-82552: Improper Resource Shutdown or Release

A security vulnerability has been detected in Linux Foundation Magma 1.9.0. Affected by this vulnerability is an unknown functionality of the file tasks/ngap/ngapamf.c of the component gNB Termination Handler. The manipulation leads to denial of service. The attack is possible to be carried out...

CVE-2026-82551: Undefined Security Weakness

A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngapamfhandlers.c of the component NGSetup Handler. Executing a manipulation can lead to state issue. The attack can be executed remotely. The exploit has been made available to the public...

CVE-2026-82550: Improper Input Validation

A security flaw has been discovered in Linux Foundation Magma 1.9.0. This impacts an unknown function of the component NGSetupRequest Handler. Performing a manipulation of the argument NG-IoT-DefaultPagingDRX results in improper input validation. Remote exploitation of the attack is possible. The...

CVE-2026-82549: Improper Validation of Integrity Check Value

A vulnerability was identified in Linux Foundation Magma 1.9.0. This affects an unknown function of the component SecurityModeComplete Handler. Such manipulation leads to improper validation of integrity check value. The attack may be launched remotely. The exploit is publicly available and might...

CVE-2026-82556: Server-Side Request Forgery (SSRF)

A vulnerability was found in Forgejo up to 15.0.4. This issue affects the function net.LookupIP of the file services/migrations/allowlist/ismigrateallowed.go of the component Repository Migration Handler. Performing a manipulation results in server-side request forgery. The attack can be initiate...

CVE-2026-82548: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

CVE-2026-82547: Improper Authentication

A vulnerability was found in Linux Foundation Magma 1.9.0. The affected element is an unknown function of the file tasks/amf/amffsm.cpp of the component Registration Complete Message Handler. The manipulation results in improper authentication. The attack can be launched remotely. The exploit has...

CVE-2026-82543: Concurrent Execution using Shared Resource with Improper Synchronization

A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function updatefileusage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The...

CVE-2026-82592: Stack-based Buffer Overflow

A vulnerability was detected in D-Link DIR-825M 1.1.8. This affects the function sub46725C of the file /boafrm/formDiskFormat of the component Disk Formatting Handler Endpoint. The manipulation of the argument partition results in stack-based buffer overflow. The attack can be executed remotely...

PT-2026-83552

A vulnerability was detected in vastsa FileCodeBox up to 2.3. This vulnerability affects the function update file usage of the file apps/base/views.py of the component Pickup Limit Handler. Performing a manipulation results in race condition. It is possible to initiate the attack remotely. The...

SPIP Autosave Session Unauthenticated RCE

This module exploits an unauthenticated RCE in SPIP use exploit/multi/http/spip/autosaverce msf undefinedautosaverce show actions ...actions... msf undefinedautosaverce set ACTION msf undefinedautosaverce show options ...show and set options... msf undefinedautosaverce run This module requires...

PT-2026-83520

Name of the Vulnerable Software and Affected Versions MyHome Core versions prior to 4.4.6 Description An authentication bypass exists in the MyHome Core plugin for WordPress. The issue stems from missing authorization in the send link AJAX handler and improper token validation within the activate...

PT-2026-83586

A vulnerability was determined in Linux Foundation Magma 1.9.0. The impacted element is an unknown function of the component InitialUEMessage Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

PT-2026-83629

Name of the Vulnerable Software and Affected Versions ash graphql versions 1.9.0 through 1.10.x Description A remote client can read internal field names that an application configured its error handler to redact. In AshGraphql.Errors, errors are processed by the error handler and merged using...

PT-2026-83588

A weakness has been identified in Linux Foundation Magma 1.9.0. Affected is an unknown function of the file ngap amf handlers.c of the component NGSetup Handler. Executing a manipulation can lead to state issue. The attack can be executed remotely. The exploit has been made available to the publi...