Open vSwitch Router DoS

The vulnerability of the ovsflowcmdset function in the netopenvswitch/datapath.c module, which is part of the Open vSwitch switchboard for Linux operating systems, involves releasing an incorrect pointer. Exploiting this vulnerability could allow a attacker to cause a service failure...

Open edX Platform validate_timestamp_and_nonce() function Unauthenticated Access

The vulnerability of the validatetimestampandnonce function in the online training platform Open edX Platform relates to bypassing the authentication process. Exploiting this vulnerability could allow a malicious actor to circumvent security restrictions and gain unauthorized access to protected...

Open edX set_course_mode_price() Gain Access

The vulnerability of the setcoursemodeprice function on the online training platform Open edX is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to gain access and modify data...

PT-2026-89160

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.10.0 through 0.11.0 Description An authenticated user can create a parent cycle by placing a folder under itself or one of its descendants. This occurs because the system does not validate that the new parent is not the...

PT-2026-85569

Name of the Vulnerable Software and Affected Versions Dub affected versions not specified Description An open redirect issue exists where the redir url query parameter is accepted on every short link without validation or domain allowlist enforcement. This allows attackers to append the redir url...

PT-2026-89159

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.0 through 0.11.0 Description An issue exists in the calendar event model within backend/open webui/models/calendar.py where the meta.alert minutes value is stored without type validation. Because the shared upcoming-eve...

PT-2026-89161

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.9.0 through 0.11.0 Description An issue exists where role synchronization fails to invalidate cached user records during a privilege demotion. When an administrator is demoted via a trusted role header or OAuth role...

PT-2026-86269

Camaleon CMS versions 2.7.5 through 2.9.1 fail to validate redirect targets when fetching remote files in the Upload from URL media feature. Authenticated attackers can supply URLs that pass initial validation but redirect to internal network addresses, allowing server-side request forgery to...

CVE-2026-85649: Not Failing Securely

Holloway Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-minbase-install.sh. The installer invokes mkpasswd to generate yescrypt password hashes but does not check the command's...

PT-2026-85524

Holloway Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open password validation vulnerability in the Alpha user and root user password loops of Shell/debian-minbase-install.sh. The installer invokes mkpasswd to generate yescrypt password hashes but does not check the command's...

Linux Distros Unpatched Vulnerability : CVE-2026-18329

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Description NGINX JavaScript njs and QuickJS qjs engines have a vulnerability when a jsaccess handler performs asynchronous request body processing and an...

TIER: Threat Implicitness Benchmark for Evaluating LLM Safety Behaviors

Current LLM safety benchmarks largely rely on binary metrics, overlooking how models respond to harmful prompts with varying threat implicitness. We introduce TIER, a Threat Implicitness Benchmark for behavioral safety evaluation of LLMs. TIER covers four risk domains and four threat levels, from...

CVE-2026-49509

CVE-2026-49509 is an out-of-bounds read vulnerability in Samsung Opensource Escargot , a JavaScript engine, that allows overread of buffers. The affected commit is 25648aef19187b3f87f4d9420b8d761453ad4630. The CNA-assigned CVSS 3.1 score is 4.4 (MEDIUM) , with a local attack vector, low complexit...

GHSA-CV2G-M8RR-888C vulnerabilities

Vulnerabilities for packages: label-studio, py3-nltk, open-webui, nemo, apache-beam-python-3.13-sdk, apache-beam-python-3.12-sdk, apache-beam-python-3.11-sdk, kubeflow-pipelines-visualization-server...

CVE-2026-66393 vulnerabilities

Vulnerabilities for packages: label-studio, py3-nltk, open-webui, nemo, apache-beam-python-3.13-sdk, apache-beam-python-3.12-sdk, apache-beam-python-3.11-sdk, kubeflow-pipelines-visualization-server...

GHSA-CV2G-M8RR-888C vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-nltk, open-webui...

CVE-2026-66393 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-nltk, open-webui...

CVE-2026-53728

Medplum is a developer platform that enables development of healthcare apps. Prior to version 5.1.6, the external identity provider callback at GET /auth/external accepts attacker-controlled redirect URIs that only need to start with a registered client redirect URI, rather than matching exactly...

CVE-2026-49456

Waku is the minimal React framework. Prior to version 1.0.0-beta.1, the unstableredirect helper exported from waku/router/server packages/waku/src/router/define-router.tsx:156–161 accepts an arbitrary string and reflects it unchanged into the HTTP Location response header with no URL validation,...

Security Bulletin: MongoDB Enterprised Advanced affected by: Open Redirect (CVE-2026-40181)

Summary There are vulnerabilities in router-1.23.2.tgz used in MongoDB Enterprised Advanced for IBM, involving CVE-2026-40181. The vulnerability has been addressed. Vulnerability Details CVEID:CVE-2026-40181 DESCRIPTION: React Router is a router for React. In versions 7.0.0 through 7.14.0 and 6.7...