CVE-2026-27903

A flaw was found in minimatch, a utility for converting glob expressions into JavaScript regular expressions. A remote attacker can exploit this vulnerability by providing a specially crafted glob pattern containing multiple non-adjacent GLOBSTAR segments. This can lead to unbounded recursive...

Exploit for CVE-2026-24009

docling-core-CVE-2026-24009 T...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the Actions V2 webhook. An attacker can access internal network resources and gather information about internal services by specifying target URLs that resolve to local hosts or internal IP addresses...

CVE-2026-26186

Fleet is open source device management software. A SQL injection vulnerability in versions prior to 4.80.1 allowed authenticated users to inject arbitrary SQL expressions via the orderkey query parameter. Due to unsafe use of goqu.I when constructing the ORDER BY clause, specially crafted input...

CVE-2026-26186 Fleet has a SQL injection via backtick escape in ORDER BY parameter

Fleet is open source device management software. A SQL injection vulnerability in versions prior to 4.80.1 allowed authenticated users to inject arbitrary SQL expressions via the orderkey query parameter. Due to unsafe use of goqu.I when constructing the ORDER BY clause, specially crafted input...

CVE-2026-27951

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. The StreamEnsureCapacity function can create an endless blocking loop, leading to a Denial of Service DoS. This vulnerability can be exploited on 32-bit systems where the available physical memory is greater than o...

CVE-2026-27950

A flaw was found in FreeRDP. An incomplete fix for a heap-use-after-free vulnerability CVE-2026-24680 in the SDL2 implementation allows a remote attacker to trigger a denial of service. The pointer is not nulled after being freed, which can lead to memory corruption. This issue means that...

CVE-2026-27015

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A malicious Remote Desktop Protocol RDP server can exploit a missing bounds check vulnerability in the smartcard redirection feature. This can lead to a client crash, resulting in a Denial of Service DoS for the...

CVE-2026-26271

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A remote attacker could exploit a buffer overread vulnerability by sending crafted Remote Desktop Protocol RDP Window Icon TSICONINFO data to a client. This could lead to a Denial of Service DoS on the client syste...

CVE-2026-26986

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. This double free vulnerability occurs during the cleanup process when a remote desktop session disconnects. Specifically, if a title allocation fails, a pointer to an application window is freed but not removed fro...

CVE-2026-25997

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. This vulnerability, a heap use-after-free, occurs during an auto-reconnect operation when the xfclipboardformatsfree function frees memory that is still being accessed by another thread. A remote attacker could...

CVE-2026-25959

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A remote attacker could exploit a race condition in the clipboard handling feature. This vulnerability, known as a heap use-after-free, occurs when the system attempts to use memory that has already been released...

CVE-2026-25955

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. This use-after-free vulnerability occurs because the xfAppUpdateWindowFromSurface function reuses a cached image whose data pointer references a freed RDPGFX surface buffer. A remote attacker could exploit this fla...

CVE-2026-25954

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol RDP. A remote attacker could exploit a use-after-free vulnerability in the xfrailserverlocalmovesize function. This occurs because the xfrailgetwindow function returns an unprotected pointer, allowing a main thread ...

CVE-2026-25953

A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. This use-after-free vulnerability occurs in the xfAppUpdateWindowFromSurface function where a bare pointer to a window is obtained without proper lifetime protection. A remote attacker could exploit this by...

CVE-2026-25952

A flaw was found in FreeRDP. A remote attacker could exploit a use-after-free vulnerability in the xfSetWindowMinMaxInfo function. This occurs when a freed window pointer is dereferenced because the main thread concurrently deletes a window while the Remote Desktop Protocol RAIL channel thread is...

CVE-2026-25942

A flaw was found in FreeRDP. A malicious server can exploit this vulnerability by sending a specially crafted execResult value 7 or greater to the client. This unchecked value is used to index an array, leading to an out-of-bounds read in the xfrailserverexecuteresult function. This can potential...

CVE-2026-25941

A flaw was found in the FreeRDP client. A malicious Remote Desktop Protocol RDP server can exploit an out-of-bounds read vulnerability in the RDPGFX channel. By sending a specially crafted WIRETOSURFACE2 Protocol Data Unit PDU with a bitmapDataLength value exceeding the actual data, an attacker c...

CVE-2026-27494 n8n has Arbitrary File Read via Python Code Node Sandbox Escape

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could use the Python Code node to escape the sandbox. The sandbox did not sufficiently restrict access to certain built-in Python...

CVE-2026-27494

n8n is an open source workflow automation platform. Prior to versions 2.10.1, 2.9.3, and 1.123.22, an authenticated user with permission to create or modify workflows could use the Python Code node to escape the sandbox. The sandbox did not sufficiently restrict access to certain built-in Python...