CVE-2026-0199

A vulnerability exists in the Goodix Fingerprint TA component due to an out-of-bounds write in gf_ta_test_set_config of gf_ta_test.c. This issue stems from improper input validation and could allow an attacker to achieve local escalation of privilege (EoP) without requiring additional execution p...

CVE-2026-0199

In gftatestsetconfig of gftatest.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-79157

In gftatestsetconfig of gftatest.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0199

In gftatestsetconfig of gftatest.c, there is a possible out-of-bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-13210

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to access CI/CD variables outside their intended environment scope due to improper input...

CVE-2026-11934

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied input...

CVE-2026-12355

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an attacker to perform JNDI injection attacks due to insufficient input validation,...

CVE-2026-11926

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...

CVE-2026-56831

Shopper Framework (package shopper/framework), a headless e-commerce admin panel, is vulnerable to a business logic flaw (CWE-20) in versions prior to 2.9.0 . The /cpanel/discounts administrative interface accepts negative fixed_amount discount values without server-side validation, persisting th...

CVE-2026-56831 Shopper: Negative discount values accepted and propagated through order calculation pipeline

Shopper is a Headless e-commerce Admin Panel. Prior to 2.9.0, the /cpanel/discounts administrative interface accepts negative fixedamount discount values, persists them in shdiscounts, and passes them through vendor/shopper/cart/src/Discounts/DiscountCalculator.php and...

CVE-2026-13210

GitLab CE/EE is affected by an improper input validation flaw in the environment scope pattern matcher for CI/CD variables. An authenticated user could access CI/CD variables outside their intended environment scope under certain conditions. The issue affects versions from 15.7 before 19.1.8 , 19...

EUVD-2026-78908

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to access CI/CD variables outside their intended environment scope due to improper input...

CVE-2026-11926 Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access could allow a remote attacker to cause a denial of service due to insufficient validation of incoming request resources...

CVE-2026-11934

IBM Verify Identity Access and IBM Security Verify Access are affected by CVE-2026-11934 , where improper validation of user-supplied input could allow an administrator to execute unauthorized commands (CWE-285 ). This vulnerability impacts IBM Verify Identity Access versions 11.0.0 - 11.0.3 IF1 ...

EUVD-2026-78885

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied input...

CVE-2026-11934 Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied input...

CVE-2026-11934 Security vulnerabilities have been addressed in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access could allow an administrator to execute additional commands they are not entitled to due to improper validation of user supplied input...

CVE-2026-12355 IBM MQ Resource Adapter IVT servlet is vulnerable to unauthenticated remote code execution

IBM MQ 9.1.0.0 through 9.1.0.37 LTS, 9.2.0.0 through 9.2.0.43 LTS, 9.3.0.0 through 9.3.0.41 LTS, 9.3.0.0 through 9.3.5.1 CD, 9.4.0.0 through 9.4.0.25 LTS, 9.4.0.0 through 9.4.5.1 CD, and 10.0.0.0 could allow an attacker to perform JNDI injection attacks due to insufficient input validation,...

CVE-2026-12355

IBM MQ versions 9.1–10.0.0.0 are vulnerable to JNDI injection via a bypass of the name sanitization in the JMS Resource Adapter IVT servlet . Due to insufficient input validation, an unauthenticated remote attacker can supply a malicious JNDI URL to achieve information disclosure or remote code e...

CVE-2026-47780

free5GC is an open-source implementation of the 5G core network. In 4.2.3 and earlier, HandleCreateEeSubscriptions and HandleQueryeesubscriptions in free5gc/udr internal/sbi/apidatarepository.go validate the ueId path value with a regular expression whose final .+ alternative accepts every...