PT-2026-82728

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in woylie doggo allows Reflected XSS. Doggo.normalize value/2 in lib/doggo.ex returned date field values wrapped in :safe, ..., the Phoenix.HTML marker meaning "already escaped, emit verbatim", withou...

PT-2026-82530

Name of the Vulnerable Software and Affected Versions free5gc version 4.0.1 Description Improper input validation in the buildFilter function located in processor/processor.go allows attackers to cause a Denial of Service DoS, a condition where the system becomes unavailable to its intended users...

CVE-2026-30070

An issue in the HandleGetSharedData function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-35869

A Command Injection vulnerability exists in the bsSetLimitCliinfo function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

PT-2026-82659

A Command Injection vulnerability exists in the bs SetLimitCli info function within the libshare.so library of LB-link Router AC450M V4.0.0. This flaw occurs due to insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. An...

PT-2026-82531

An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-30067

An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-67115

An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-30071

An issue in the RechargePut function of free5gc v4.0.1 allows an attacker to trigger a Denial of Service (DoS) condition by providing a crafted input . The vulnerability is characterized as an Allocation of Resources Without Limits or Throttling . No specific exploit details or remediation instru...

CVE-2026-30058

The free5gc software, version v4.0.1 , is vulnerable to a Denial of Service (DoS) condition due to Improper Input Validation in the HTTPModifySubscription handler. An attacker can exploit this by providing a crafted input to trigger the service disruption. No specific remediation instructions or ...

CVE-2026-30067

The free5gc v4.0.1 software is affected by a Denial of Service (DoS) vulnerability within the NRF Discovery service. The flaw exists specifically in the complexQueryFilterSubprocess function, where a crafted input can be used by an attacker to trigger the DoS condition. No specific remediation, e...

CVE-2026-30068

The software free5gc v4.0.1 is affected by a Denial of Service (DoS) vulnerability due to improper input validation within the HandleUpdate function located in /sbi/parameter_provision.go. An attacker can exploit this by providing a crafted input . No specific exploit details, proof-of-concept li...

CVE-2026-30070

The free5gc v4.0.1 software contains a vulnerability in the HandleGetSharedData function. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted input . The vulnerability is categorized as a high-severity issue with a CVSS score of 7.5, primarily impacting availa...

CVE-2026-35869

The LB-link Router AC450M V4.0.0 is affected by a Command Injection vulnerability in the bs_SetLimitCli_info function of the libshare.so library. The root cause is the insufficient validation and sanitization of user-supplied input before it is passed to a system-level command execution context. ...

CVE-2026-30064

The software free5gc v4.0.1 is vulnerable to a Denial of Service (DoS) attack due to improper input validation in the buildFilter function located in processor/processor.go . An attacker can trigger this condition by providing a crafted input . No specific exploitation details or remediation step...

PT-2026-82770

Wazuh is an open-source security platform providing unified XDR and SIEM protection for endpoints and cloud workloads. In versions 4.2.0 through 4.14.6, multiple active response scripts pass attacker-influenced alert fields to privileged system commands without validating their format, allowing...

CVE-2026-30071

An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-26459

ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a vulnerability in the option parsing logic that causes a segmentation fault when processing malformed COAP messages with insufficient option data...

EUVD-2026-67109

Improper Input Validation in the HTTPModifySubscription handler of free5gc v4.0.1 allows attackers to cause a Denial of Service DoS via a crafted input...

UltraJSON 5.13.0-6-g733f9e1 Out-Of-Bounds Read

UltraJSON version 5.13.0-6-g733f9e1 suffers from an out of bounds read vulnerability. UltraJSON contains an out-of-bounds read in its native C JSON decoder when processing certain incomplete JSON values supplied through an explicitly length-bounded input buffer. The affected native entry point,...