CVE-2026-107732: Improper Control of Generation of Code

SumatraPDF is a multi-format reader for Windows. In 3.6.1 and earlier, untrusted document paths and PDF link targets are interpolated into notification text that ParseTip interprets as trusted tip markup. When a user clicks an injected link, ExecuteTipLink dispatches its CmdExec command and can...

EulerOS 2.0 SP15 : qemu (EulerOS-SA-2026-4013)

According to the versions of the qemu packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A flaw was found in the QEMU Guest Agent qga. A local unprivileged user can exploit a vulnerability in the guest-ssh-add-authorized-keys command...

CVE-2026-107608: Improper Link Resolution Before File Access

Improper link resolution before file access in the asset bundling output handling in AWS aws-cdk-lib before 2.267.0 might allow a context-dependent actor to cause files from the build host to be published as the deployed asset. To remediate this issue, users should upgrade to version 2.267.0 or...

PT-2026-108245

Name of the Vulnerable Software and Affected Versions Banks versions prior to 2.5.1 Description In banks.registries.DirectoryPromptRegistry, the system fails to reject symbolic links for the index.json file and discovered .jinja prompt files. In environments where untrusted users can influence th...

PT-2026-108284

Name of the Vulnerable Software and Affected Versions TP-Link Tapo C325WB V2 affected versions not specified Description The local media streaming service generates a pre-shared key using a time-seeded pseudo-random number generator, which makes the key predictable and recoverable. An...

PT-2026-108282

Name of the Vulnerable Software and Affected Versions TP-Link Tapo C325WB V2 affected versions not specified Description An unauthenticated authorization bypass exists in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can bypass session verification and execute...

CVE-2026-105674: Use of Insufficiently Random Values

TP-Link Tapo C325WB V2 generates the pre-shared key used by its local media streaming service with a time-seeded pseudo-random number generator, making the key predictable and recoverable. An unauthenticated attacker on the adjacent network can recover the key and authenticate to the media...

CVE-2026-105672: Improper Authentication

TP-Link Tapo C325WB V2 contains an unauthenticated authorization bypass vulnerability in the HTTPS JSON API dispatcher on TCP port 443. An attacker on the adjacent network can append an onboarding-scoped object to a JSON request to bypass session verification and invoke privileged actions without...

PT-2026-108194

Name of the Vulnerable Software and Affected Versions aws-cdk-lib versions prior to 2.267.0 Description Improper link resolution before file access in the asset bundling output handling allows a context-dependent actor to cause files from the build host to be published as the deployed asset...

CVE-2026-107707: Improper Link Resolution Before File Access

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...

CVE-2026-89091: Improper Link Resolution Before File Access

A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...

DRUPAL-CONTRIB-2026-209

This module enables you to add HTML attributes to menu links and their container elements . The module doesn't sufficiently sanitize the attributes it applies to menu link container elements. This vulnerability is mitigated by the fact that an attacker must have a role with the permissions...

SUSE CVE-2026-98313

In the Linux kernel, the following vulnerability has been resolved: drm/msm/dp: skip PUSHIDLE when the link was never enabled msmdpdisplayatomicenable returns early when link training fails, leaving -poweron false and the main link down. msmdpdisplayatomicdisable nevertheless writes...

DRUPAL-CONTRIB-2026-197

This module provides TOTP-based two-factor authentication 2FA for Drupal. The module doesn't enforce the second factor when a user logs in with Drupal core's one-time login link. This vulnerability is mitigated by the fact that an attacker must have access to a valid one-time login link for a...

EUVD-2026-94367

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

CVE-2026-107174

A security boundary bypass vulnerability exists in source-to-image due to improper sanitization of symbolic links during archive unpacking. An attacker providing a malicious builder image can embed absolute symbolic links pointing outside the extraction directory. This flaw allows the attacker to...

CVE-2026-107174 Source-to-image: source-to-image: security boundary bypass via absolute symbolic link extraction

A flaw was found in source-to-image. When unpacking archive files, the application fails to properly sanitize symbolic links pointing to absolute file paths. An attacker who supplies a malicious builder image can exploit this vulnerability by embedding links pointing outside the extraction...

BIT-JOOMLA-2026-92224 Joomla! Core - [20260911] - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260911 - Core - XSS in link toolbar layout in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3 - The link toolbar layout did not properly escape inputs, leading to an XSS vector...

BIT-JOOMLA-2026-90906 Joomla! Core - [20260901] - XSS in HTMLHelper::link method in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3

Joomla! Core - 20260901 - XSS in HTMLHelper::link method in Joomla 1.5.0-5.4.8, 6.0.0-6.1.3 - Lack of escaping leads to XSS vulnerabilities in the link method of the HTML Helper...

WordPress Koinonia Link plugin 1.1.2-1.1.4 - Subscriber+ Privilege Escalation to Administrator vulnerability

Subscriber+ Privilege Escalation to Administrator vulnerability discovered by ryan fabella in WordPress Plugin Koinonia Link versions 1.1.2-1.1.4...