CVE-2026-63461 Vendure: Shop API list queries can return non-public entities when filterOperator is OR

Vendure is an open-source headless commerce platform. Prior to 3.6.5, the public Shop API products, collections, and facets queries combine mandatory visibility guards with caller-supplied filters using the caller-controlled filterOperator. When filterOperator is OR, a predicate matching a hidden...

CVE-2026-63461

Vendure , an open-source headless commerce platform, is vulnerable in its public Shop API products, collections, and facets queries prior to 3.6.5 . The mandatory visibility guards (Product.enabled = true, Collection.isPrivate = false, Facet.isPrivate = false) were combined with caller-supplied f...

CVE-2026-92925

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds...

kernel: RDMA/rxe: Reject non-8-byte ATOMIC_WRITE payloads

A flaw was found in the Linux kernel's RDMA Remote Direct Memory Access subsystem, specifically within the rxe driver. A remote attacker could exploit this vulnerability by sending a specially crafted ATOMICWRITE request with a zero-byte payload. This improper handling of non-8-byte ATOMICWRITE...

kernel: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate()

A flaw was found in the Linux kernel's IPv6 Virtual Tunnel Interface VTI module. When a VTI tunnel device is moved to a different network environment, an unprivileged user in a separate user space can manipulate tunnel parameters. This manipulation could allow the user to intercept or redirect...

CVE-2026-92933

vm2 is a sandbox for running untrusted Node.js code. In versions = 22.9 this hands sandboxed code util.getCallSites, a programmatic stack-introspection API that returns the host process's full call stack, including absolute file paths, function names, and line numbers for vm2 bridge internals and...

CVE-2026-92918

creationtimestamp| type| source ---|---|--- 2026-09-17 14:02:54+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mvpsyppgrg2o 2026-09-17 14:11:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3epjhbzsu2s5b 2026-09-19 05:10:04+00:00| seen|...

EUVD-2026-81613

vm2 versions before 3.11.2 fail to properly restrict access to the VM2INTERNALSTATEDONOTUSEORPROGRAMWILLFAIL global variable. Attackers can access this internal state object through globalThis to retrieve sensitive sandbox internals...

CVE-2026-92962 vm2 before 3.11.4 Defense Invariant Violation via setup-sandbox.js

vm2 is a sandbox for running untrusted JavaScript. In vm2 versions up to and including 3.11.3, the defaultSandboxPrepareStackTrace function in lib/setup-sandbox.js builds its output array using prototype-walking index assignment lineslines.length = value rather than a prototype-bypassing...

CVE-2026-81941

creationtimestamp| type| source ---|---|--- 2026-09-17 13:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mvprkngf7f2p 2026-09-17 13:37:08+00:00| seen| https://bsky.app/profile/potato.software/post/3mvprkoseuq2y...

CVE-2026-61597

creationtimestamp| type| source ---|---|--- 2026-09-17 13:31:34+00:00| seen| https://gist.github.com/alon710/1b0e2f0ae4c11e6959d410c768da8b7e...

CVE-2026-85500

creationtimestamp| type| source ---|---|--- 2026-09-17 13:30:29+00:00| seen| https://infosec.exchange/users/offseq/statuses/117286622282058442 2026-09-17 13:30:31+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mvpr6u7ppo2x 2026-09-17 15:00:06+00:00| seen|...

CVE-2026-90823

creationtimestamp| type| source ---|---|--- 2026-09-17 13:20:07+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvpqmb3lqf2t 2026-09-17 13:52:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/hkwdudsijtslr 2026-09-17 14:07:20+00:00| seen|...

CVE-2026-90822

creationtimestamp| type| source ---|---|--- 2026-09-17 13:20:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvpqm6pq6e2f 2026-09-17 13:57:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/4pw5tys3banmx 2026-09-17 14:07:11+00:00| seen|...

CVE-2026-90997

creationtimestamp| type| source ---|---|--- 2026-09-17 13:00:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mvppivi4zh2f...

CVE-2026-86707

creationtimestamp| type| source ---|---|--- 2026-09-17 12:50:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mvpowl7alu2n...

EUVD-2026-81475

A flaw was found in the foremanremoteexecution plugin's template invocations controller. The showtemplateinvocationbyhost action resolves the job invocation by ID without evaluating the caller's viewjobinvocations permission filter against the record. An authenticated user whose job invocation...

CVE-2026-81440

creationtimestamp| type| source ---|---|--- 2026-09-17 12:37:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/b6jlystsclxo2...

CVE-2026-81478

creationtimestamp| type| source ---|---|--- 2026-09-17 12:29:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/56bifcjmloq67...

DEBIAN-CVE-2026-92925

A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate string-carrying extensions for null-termination. This oversight allows a remote attacker to craft a malicious packet, leading to an out-of-bounds...