CVE-2026-83531

CVE-2026-83531 — camel-dynamic-router: control-endpoint expression-language injection Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the dynamic-router-control endpoint took the subscription predicate and the name of the language used to compile it from the incoming...

CVE-2026-83531 Apache Camel: Camel-Dynamic-Router Control Endpoint Compiles Predicate Expressions Supplied by Control Messages

Improper Control of Generation of Code 'Code Injection', Improper Neutralization of Special Elements used in an Expression Language Statement 'Expression Language Injection' vulnerability in Apache Camel. This issue affects Apache Camel: from 4.4.0 before 4.18.5, from 4.19.0 before 4.22.1. The...

Exploit for CVE-2026-83531

CVE-2026-83531 — camel-dynamic-router: control-endpoint expres...

CVE-2026-98484

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip expired catchall elements on insert and delete nftsetelemcatchallinsert looks up duplicates with nftsetelemactive only, while nftsetcatchalllookup and the dump path additionally skip expired elements. On...

CVE-2026-98484 netfilter: nf_tables: skip expired catchall elements on insert and delete

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip expired catchall elements on insert and delete nftsetelemcatchallinsert looks up duplicates with nftsetelemactive only, while nftsetcatchalllookup and the dump path additionally skip expired elements. On...

CVE-2026-98484

The Linux kernel contains a vulnerability in netfilter: nf_tables regarding how it handles catchall elements . A predicate drift exists because nft_setelem_catchall_insert() only checks if an element is active, while lookup and dump paths also check if the element is expired . This causes expired...

EUVD-2026-103724

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip expired catchall elements on insert and delete nftsetelemcatchallinsert looks up duplicates with nftsetelemactive only, while nftsetcatchalllookup and the dump path additionally skip expired elements. On...

CVE-2026-98484 netfilter: nf_tables: skip expired catchall elements on insert and delete

In the Linux kernel, the following vulnerability has been resolved: netfilter: nftables: skip expired catchall elements on insert and delete nftsetelemcatchallinsert looks up duplicates with nftsetelemactive only, while nftsetcatchalllookup and the dump path additionally skip expired elements. On...

CVE-2026-108334

A flaw in the Kuadrant operator internal WebAssembly (WASM) shim allows for Expression Language Injection (CWE-917). When generating CEL predicates for Gateway-level authentication and rate limiting, the shim fails to correctly escape values from HTTPRoute match fields. An attacker with permissio...

GHSA-3HJ7-6VMJ-H8V4 pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents

Impact pacioli-guard's document-layer consent gate requires a human-minted, single-use, document-bound and act-bound marker before a credential carrying API Key Scope.requireconsent may submit or cancel a document. Because ERPNext performs further document writes as a consequence of a governed ac...

CLEANSTART-2026-YE65839 WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request

Security vulnerability affects the apache-nifi-registry package. A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request...

CLEANSTART-2026-CI58129 WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request

Security vulnerability affects the rundeck package. A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request...

CLEANSTART-2026-LT41646 WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request

Security vulnerability affects the apache-hive package. A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request...

PT-2026-108461

Security vulnerability affects the apache-hive package. A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request...

PT-2026-99003

OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used EscapeLDAPValue, an RFC 4514 distinguished-name escaping function, where RFC 4515 LDAP search-filter escaping was required in sdk/helper/ldaputil/client.go GetUserDN. With the LDAP authentication...

CVE-2026-54354

MapServer is a system for developing web-based GIS applications. Prior to 8.6.4, MapServer's PostGIS runtime filter translation in src/mappostgis.cpp and msPostGISLayerTranslateFilter treats a filteritem as numeric when CONNECTIONTYPE POSTGIS and metadata such as gmltype=Integer are configured, b...

CVE-2026-54354

MapServer is a system for developing web-based GIS applications. Prior to 8.6.4, MapServer's PostGIS runtime filter translation in src/mappostgis.cpp and msPostGISLayerTranslateFilter treats a filteritem as numeric when CONNECTIONTYPE POSTGIS and metadata such as gmltype=Integer are configured, b...

PT-2026-95101

Name of the Vulnerable Software and Affected Versions MapServer versions prior to 8.6.4 Description MapServer's PostGIS runtime filter translation in src/mappostgis.cpp and the msPostGISLayerTranslateFilter function fails to verify that input from the CGI qstring or OGC API Features featureId is ...

CVE-2026-88026

Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C Driver can cause a caller-supplied character sequence to alter a regular-expression predicate generated by an affected application. An authenticated user who can influence such a...

CVE-2026-88026 Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver

Improper neutralization of regular-expression metacharacters in the LINQ query translation component of the MongoDB C Driver can cause a caller-supplied character sequence to alter a regular-expression predicate generated by an affected application. An authenticated user who can influence such a...