Lowcoder Query Library API contains cross-tenant authorization bypass allowing for data exfiltration

Overview Lowcoder, version 2.4.10, contains an authorization bypass vulnerability in its Query Library feature’s API. Authenticated users with an admin or dev role can access private library-query data from other organizations within a multi-tenant Lowcoder instance. Description CVE-2026-16753...

CLEANSTART-2026-CX75671 Cancelling a query (e

Security vulnerability affects the buildkitd package. Cancelling a query e...

CVE-2026-19351

Technical details for CVE-2026-19351 are not publicly available in the provided documents; monitor for updates.

UBUNTU-CVE-2026-39879

Due to a missing sanitization call in afsqlddrunquery, syslog-ng before 4.12 are vulnerable to SQL injection from an untrusted source. This is not part of the default configuration, the SQL driver has to be manually configured. Fixes are in syslog-ng 4.12, syslog-ng Premium Edition 8.2 and...

CLSA-2026-1779960466 unbound: Fix of CVE-2026-42960

CVE-2026-42960: fix cache poisoning attack where promiscuous non-NS RRSets with companion glue in the authority section could cause unrelated address records to be cached as a side effect of the query...